TerritoryWire

Privacy Policy

Last updated: June 12, 2026

Draft. This policy is a working draft prepared for founder review and has not yet been reviewed by qualified legal counsel. It states our actual practices in plain language, but it should not be relied on as a final legal document.

1. Who we are

TerritoryWire ("we", "us") is a business-to-business sales-intelligence service operated by a sole founder based in Singapore [legal entity name and registration number to be inserted]. We monitor public hiring data to identify companies showing buying intent for the HubSpot ecosystem, and we sell a weekly curated digest of those signals to HubSpot partner agencies. Contact: boonyboonapp@gmail.com.

2. What data we process, and where it comes from

We process two distinct categories of data:

  • Signal data (about companies): job postings and related hiring information obtained from licensed data sources and from genuinely public company career endpoints. We respect robots.txt and the terms of service of every source we use. We do not scrape LinkedIn or any source that prohibits collection.
  • Business contact data (about people): for companies that appear in a digest, we may include the name, professional title, and business email address of 1–2 likely decision-makers, sourced from licensed enrichment providers and public professional listings. This is business contact data only. We do not collect or store personal data unrelated to a professional role, and we never collect sensitive personal data (health, beliefs, biometrics, and similar categories).

We also process customer data: the name, email address, company, and billing records of our subscribers, provided by the subscribers themselves.

3. Why we process it (lawful bases)

  • Signal data: legitimate interest in providing market intelligence about companies. Company information is not personal data in most cases.
  • Business contact data: legitimate interest (GDPR Art. 6(1)(f)) in connecting service providers with companies that have publicly signaled a need. We limit this to professional, role-relevant contact details, and we honor objections immediately (see Section 7).
  • Customer data: performance of our contract with you, and legal obligations (e.g. tax and accounting records).

4. What we never do

  • We do not sell raw databases of personal data.
  • We do not publish contact data on our public website. Public pages show anonymized company descriptions only (industry, size band, region).
  • We do not use advertising trackers or third-party analytics cookies on this site.
  • We do not send marketing email to anyone who has opted out, and every outbound email we or our pipeline sends includes a working unsubscribe mechanism and our postal address, as required by CAN-SPAM and equivalent laws.

5. Who we share data with (subprocessors)

We use a small set of infrastructure providers to operate the service: Supabase (database hosting), Vercel (website hosting), Stripe (payments — we never see your full card number), Resend (email delivery), and Anthropic (automated classification of public job-posting text; no contact data is sent for classification). Each processes data only on our instructions.

6. International transfers and retention

We operate from Singapore and use infrastructure hosted in the United States and the European Union. Where GDPR applies, transfers rely on standard contractual clauses offered by our subprocessors. We retain signal data while it remains commercially relevant, business contact data only while the underlying signal is current or until an objection is received, and customer records as long as required by law.

7. Your rights

If you are in the EU/EEA or UK (GDPR/UK GDPR), Singapore (PDPA), or another jurisdiction with similar rights, you may request access to, correction of, or deletion of personal data we hold about you, object to our processing, or lodge a complaint with your supervisory authority (in Singapore, the PDPC). If you appear in a digest and would rather not, one email is enough: write to boonyboonapp@gmail.com and we will remove your contact details from our records within 7 days and suppress them from future digests.

8. Cookies

The public website sets no cookies. The internal admin area uses strictly necessary authentication cookies for the founder's login only.

9. Security

Data is stored in access-controlled databases with row-level security, secrets are kept out of source control, and production access is limited to the founder. No method of storage is perfectly secure; we will notify affected parties of any breach as required by applicable law.

10. Changes

We will post any changes on this page and update the date above. Material changes will be emailed to subscribers.