Privacy

What we deliberately do not hold

No identity documents. At launch, business verification (KYB) will be carried out by a licensed payment partner, and Tranchio will hold only a reference to their result — never the passports, registration certificates or ownership records behind it. That partner is not engaged yet, so no such checks run today. There are no third-party analytics, advertising or cross-site tracking anywhere on this site, so nothing about your visit is shared with an ad network or data broker.

What we collect, and why

• When you ask for access. The request form collects your email, and optionally your name, company, whether you buy or supply, your trade corridor, an indication of monthly volume, and any message. We use it only to assess and respond to the request. It does not create an account or grant access to anything.
• When you use the platform. Your name, work email, the company you belong to, your role in it, and your chosen language. Sign-in is handled by Google Identity Platform; we record the identifier it returns so we can recognise you, and never a password.
• The record of your trades. Purchase orders, inspection reports, shipping documents, the messages between the parties, and the ledger of what was funded and released. This is the evidence of what was agreed and why money moved, and it is the reason the product exists.
• A security and audit trail. Every state change, who made it, and the network address the request came from — kept so a dispute can be reconstructed and misuse detected.
• Product telemetry. Recorded on our own servers: which pages you view, how far you read them, which links you click, and the site or campaign link that referred you. This is first-party. It stays inside Tranchio, is never shared with a third party, and sets no cookie beyond the visit cookie below. If your browser sends a Global Privacy Control or Do Not Track signal, we do not record it.
• One cookie. __session is a first-party, opaque visit identifier that lasts only until you close the browser. It carries no personal data and is used only to group requests that happened together. There are no advertising or cross-site cookies.

Who else processes it

Only the providers that make the service work, each acting on our instructions: Google Cloud, which hosts the platform, provides sign-in, and delivers our email. At launch a licensed payment partner will move funds and perform KYB; none is engaged yet, so none processes your data today. We do not sell your data, and we do not share it for advertising.

Where it is processed

The platform runs in Hong Kong. Some of the providers above may process data in other countries under their own contractual safeguards.

How long we keep it

• Access requests are deleted within twelve months of being decided.
• Network addresses in the audit and telemetry records are cleared after about thirteen months; product telemetry is cleared after six months.
• Account records and the record of your trades are kept for as long as you use Tranchio and for a period afterwards, so far as we must to meet record-keeping and anti-money-laundering obligations, then deleted or anonymised.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it — the last subject to records we are required to keep. To exercise any of these, or if you are unhappy with how we have handled your data, email privacy@tranchio.com. You may also complain to the Office of the Privacy Commissioner for Personal Data in Hong Kong, or to the data-protection authority where you live.

Changes

If we change what we collect or how we use it, we will update this page and its effective date before the change takes effect.

How documents are stored and verified is described on the security page.