vcspine

Privacy

What we hold, why, and how to make us delete it. Last updated 15 September 2026.

Who is responsible

SparkIntell Inc., a Texas corporation doing business as vcspine, decides what data this site collects and why. In the language of European law, we are the controller. Our registered address is on file with the Texas Secretary of State, and our email is hello@vcspine.com.

What we collect

Your email address. Only if you give it to us — to request an API key, to subscribe to the feed, or to start a paid plan. Nothing else is required.

What you tell us when you ask for a key. The company name and the use you describe, if you choose to type them; a one-way hash of your IP address, kept so that one address cannot request more than three keys a day; and the time you agreed to the Terms. We do not store the address itself.

The firms you asked to watch. Stored alongside your email, so we know what to tell you about.

API keys. We store a SHA-256 hash of your key, never the key itself. If you lose it we cannot tell you what it was — only issue another. We also keep a count of requests per key so we can apply the rate limit.

Payment details, if you pay us. Card payments are handled by Stripe. Stripe collects your card number, billing name and address, and whatever else it needs to take the payment; we never receive your full card number. What we hold is your name, the email on the account, the plan you are on, the last four digits and expiry of the card, and a record of invoices. Stripe's own privacy policy governs what Stripe does: stripe.com/privacy.

Request logs. We keep none ourselves. Cloudflare, which serves the site, processes the IP address and request of every visitor in order to deliver the page and defend against abuse, under its own policy; we see aggregate counts, not individual visitors. We do not build profiles from any of it.

Anything you write to us. If you email us, we keep the email so we can reply and, for corrections, so we have a record of what was changed and why.

What we do not do

There are no advertising trackers, no analytics pixels, and no third-party scripts following you. The pages load nothing from anyone else's servers — the typeface is served from here, not from a font service — so no third party sees your visit except Cloudflare, which delivers the page. We set no cookies at all. If we ever add an account you sign in to, the one cookie that keeps you signed in will be described here first. There is no cookie banner on this site because there is nothing to consent to. We do not sell, rent or share your email address with anyone, and we will not email you about anything other than what you asked for.

Who else touches it

We use a small number of providers to run the service. Each one only receives what it needs to do its job.

All are based in the United States. Where a provider has certified to the EU–U.S. Data Privacy Framework or uses the standard contractual clauses, that is the basis on which data from Europe reaches it.

We do not otherwise share your data, except where the law requires us to, or to protect the service or someone's safety.

The data about firms

The firm and fund records on this site come from public SEC filings. Where a filing names a person — a general partner, for example — that name is part of the public record and appears here as filed. We do not enrich it, cross-reference it against other sources, or build profiles of individuals.

If you are named on a filing and the name shown here does not match the filing, write to us and we will correct it. We do not remove names that match the filed record, because the record is public and the point of the site is to reproduce it faithfully.

Keeping and deleting

We keep your email for as long as you want to hear from us. Every email we send carries an unsubscribe link, and every commercial email carries a postal address at which we can be reached, as U.S. law requires.

You can also write to us and ask us to delete your address and everything attached to it — watched firms, API key hash, key request, billing contact — and we will, within thirty days, without asking why, and without keeping a copy. One thing we cannot delete on request: invoices, which tax law requires us to keep for seven years.

If you had a paid plan, we keep the billing record for as long as tax law requires and delete it after that.

If you are in the European Economic Area, the United Kingdom or Switzerland

You have the same protections as everyone else on this page, plus the ones the law there gives you.

Why we are allowed to process your data. Your email and watched firms: because you asked us to (consent), which you can withdraw at any time by unsubscribing or writing to us. Your account and payment data: because we need it to provide what you bought (contract). The hashed IP on a key request and API rate-limit counts: because we have a legitimate interest in keeping the service secure and working, and this is the least intrusive way to do it.

Your rights. You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it, or object to how we use it. Write to hello@vcspine.com. We will respond within a month and will not charge you. If you are not happy with our answer, you can complain to your local data protection authority.

Where your data goes. We are in the United States and so are our providers. Data from Europe is transferred on the basis described under "Who else touches it."

If you are in California

We do not sell or share personal information as California law uses those words, and we do not use it for targeted advertising. You have the right to know what we hold about you, to have it deleted, and to correct it — the same rights described above, and the same email address.

Children

This site is not for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us an email address, tell us and we will delete it.

Security

Keys are hashed, the site is served over HTTPS, and access to the subscriber table is limited to the people who need it. No system is perfectly secure. If something goes wrong with your data, we will tell you as soon as we reasonably can, and within the time the law requires.

Changes

If we change this page in a way that matters, we will note the new date at the top and email account holders before the change takes effect. We will not use your data for something new without telling you first.

Questions, a copy of your data, or a deletion request: hello@vcspine.com