Privacy
Draft summary · last reviewed 2026-08-24
Draft placeholder
The operative privacy policy is being finalised with counsel. What follows describes what the product actually does with your information today, and is not itself a legal agreement. We will publish the operative text here before it takes effect.
The public directory needs nothing from you. Browsing facilities, reading profiles and searching require no account, no sign-in and no information about who you are.
What we collect, and when
If you describe a requirement on Find capacity, we store what you typed — the product description, rough volume, timeline and region — together with your name, company and email address so we can send you the results. We also record the IP address and browser the submission came from, which is what stops one person submitting a hundred inquiries.
If you claim a facility listing, we store your name, work email, job title, the facility you claimed, and the version of the terms you accepted with the time you accepted them. We record the IP address and browser for the same reason.
If you hold an account, authentication is handled by Clerk, which holds your email and credentials. We do not store your password.
Who else sees it
Not the facilities in your results. Scoring runs against public registry data about them, not against your identity. Nothing about you reaches a facility until you ask us to introduce you to that specific site.
To operate the product we pass data to a small number of processors: Supabase stores it, Clerk handles sign-in, Resend delivers email to the address you gave us, and Anthropic receives your requirement text and the public listing data when your inquiry is scored. We do not sell anything to anyone, and we do not share your requirement with facilities you did not choose.
Facility records themselves come from public EPA registries. They describe sites, not people, and publishing them is not a privacy decision about you.
Corrections and removal
Write to tommy@chemrails.com and ask. If you want your inquiry or claim deleted, say so and it is deleted — there is no form and no account required. If a facility listing is wrong, operators can claim it and correct it directly.