Privacy Policy

Who we are

Torralba is operated by John Tantoco, as a pilot business-intelligence service.

What we collect

• Your name — so we can address you correctly in the product and in email digests.
• Your company — to understand which kinds of organisations the pilot is useful to.
• Your email address — used as your login identifier and to send alert digests you can unsubscribe from at any time.
• Your investor type and sector of interest — to prioritise what we cover.
• Feedback you give us — thumbs up/down on individual items, survey answers (including any willingness-to-pay figure you enter), and any reason you write when requesting Verified Access.
• Basic usage records — which items you have opened and when you last visited, so the dashboard can show you what changed since your last visit.

We do not collect payment details, we do not run advertising trackers, and we do not buy or sell personal information.

Why we collect it

We use this information for three purposes only: to operate your account and personalise what you see; to send the alert digests you have subscribed to; and to evaluate whether the pilot is genuinely useful before deciding whether to build it further. Feedback and survey responses are reviewed in aggregate by the Torralba team.

Where it is stored

Your data is stored securely in a managed Supabase (PostgreSQL) database. Access is protected by row-level security rules, which mean your profile, your read history, your feedback and your survey answers can only be read by you and by the single pilot administrator. Passwords are hashed by the authentication provider and are never visible to us. Traffic to the service is encrypted over HTTPS.

Emails and unsubscribing

Every alert digest we send identifies Torralba as the sender and includes a working unsubscribe link. Unsubscribing stops digest emails immediately; you keep your account and can re-subscribe from your account settings. Account-critical messages (such as password resets) are not marketing and will still be sent.

Deletion and access requests

You can ask us at any time for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and everything associated with it. We will action deletion requests within 30 days and confirm in writing when it is done.

Contact for privacy requests

Email john@jtantoco.com with the subject line "Privacy request". A person, not a bot, reads that inbox.