Introduction
This policy explains how TSALACH VENTURES LLC collects and processes personal data in connection with visits to tsalach.ventures, use of its form, and resulting communications. It does not cover portfolio websites or products that independently determine their processing and, where applicable, publish their own policies.
We limit collection to information useful for understanding and responding to a request, protecting the website, and measuring its operation. The website does not sell personal data and does not use submitted requests for a newsletter or automated marketing.
Data controller
The data controller is TSALACH VENTURES LLC, a Wyoming Limited Liability Company managed by its sole member, Wyoming Original ID 2026-001966609.
- Registered address: 30 N Gould St, Ste R, Sheridan, WY 82801, USA.
- Public operational address: Abidjan, Côte d’Ivoire.
- Privacy contact: privacy@tsalach.ventures.
- General contact: contact@tsalach.ventures.
- USA telephone: +1 307 381 9522.
- Côte d’Ivoire telephone: +225 07 57 93 84 65.
No Data Protection Officer or European Union representative has been appointed as of the date of this update. This position is reassessed if the nature, volume, targeted territories, or risks of the processing change. Requests may in all cases be sent to the privacy contact above.
Scope
This policy covers website visitors, people who submit a request as an investor or founder, and people who subsequently communicate with Tsalach Ventures about that request.
The website is primarily intended for companies, investors, partners, founders, and organizations. There are currently no user accounts, newsletter, connected CRM, payments, or data room accessible through the website.
Data we collect
The form collects the following fields:
- for all journeys: role, name, email, optional organization, country, and message;
- investor journey: organization type, area of interest, and investment thesis or region;
- founder journey: business problem, number of users, project stage, timeline, and budget;
- technical fields: form access identifier, dynamic subject, sender name, and anti-bot honeypot field.
Cloudflare, Web3Forms, and their technical subprocessors may also process the IP address, device or browser type, timestamps, security logs, and information necessary to detect abuse.
The form has no upload field, requests no payment data, and does not solicit sensitive data. Do not send an unrequested trade secret, confidential document, or sensitive data in the free-text message. If such information is received accidentally, it may be deleted or its processing restricted where it is not needed for the request.
Purposes and legal bases
| Purpose | Data concerned | Basis used where required by applicable law |
|---|---|---|
| Receive, qualify, and respond to a request | Identity, contact details, organization, country, message, and journey fields | Steps taken at your request before a potential contract and Tsalach’s legitimate interest in managing its B2B relationships |
| Evaluate an exploratory conversation with an investor or partner | Professional information and request content | Legitimate interest in identifying and evaluating potential professional relationships |
| Protect the website, prevent spam, and diagnose incidents | IP address, device, browser, timestamps, and logs | Legitimate interest in ensuring the security, integrity, and availability of the website |
| Measure audience and performance without individual profiling | Pages viewed and technical metrics from the Cloudflare beacon | Legitimate interest in understanding use and improving the website |
| Comply with an obligation or defend legal rights | Information relevant to the obligation or dispute | Applicable legal obligation or legitimate interest in establishing, exercising, or defending legal rights |
Fields marked as required are necessary to submit and process the request. Without them, the form cannot be submitted or Tsalach may be unable to respond. No decision producing legal or similarly significant effects is made automatically.
Processors and recipients
Internal access is limited to Yapi Landry Stéphane. The following providers are involved in the current flow:
- Cloudflare, Inc. — Cloudflare Pages, DNS, edge delivery, security, Web Analytics, and Email Routing;
- Web3Forms / Web3Creative — receipt, validation, storage, abuse prevention, and transmission of submissions, together with its infrastructure and anti-spam providers;
- Google Gmail — private destination mailbox for routed emails. This is currently a personal Gmail account and not a Google Workspace account covered by a Workspace DPA.
Data may also be disclosed where required by law, to protect the rights or safety of Tsalach or others, or as part of a business transaction subject to appropriate safeguards.
No CRM, newsletter tool, or data room service currently receives form data.
Cookies and audience measurement
Cloudflare Web Analytics is active on the production domain. According to the configuration and scans performed, it operates without cookies, localStorage, or sessionStorage, and no other non-essential tracker is present. Cloudflare states that it collects minimal metrics and does not individually track visitors across its customers’ websites.
On this inventory, no consent banner is displayed. If a non-essential tracker or new tool is added, this policy and the consent mechanism will be reassessed before activation.
International transfers
The website is operated from Côte d’Ivoire by a U.S. LLC and uses international providers. Data may therefore be processed in the United States, India, the European Union, and on networks or infrastructure located in other countries.
Where European data protection law applies, Cloudflare documents the Data Privacy Framework and Standard Contractual Clauses; Web3Forms provides Standard Contractual Clauses for relevant transfers and states that it operates from India with multi-region subprocessors; Google documents the Data Privacy Framework and Standard Contractual Clauses depending on the service and transfer. These mechanisms do not replace any other obligations that may apply to Tsalach.
Additional information or a copy of available safeguards may be requested at privacy@tsalach.ventures, subject to confidential or protected provisions of provider contracts.
Retention
Tsalach applies the following internal rules:
- spam and clearly irrelevant requests: deletion within no more than 30 days;
- unqualified requests: deletion 12 months after the last communication;
- qualified opportunities, active discussions, and investor conversations: deletion 24 months after the last meaningful communication, unless the relationship continues or a justified need remains;
- information needed for a contract, legal obligation, or the defense of legal rights: separate retention for the period required or permitted by applicable rules.
The current Web3Forms plan does not allow a custom retention period, and the provider states that technical retention may extend up to three years. Tsalach therefore performs a manual monthly review and purge of the dashboard and mailbox in accordance with the periods above. Some logs, residual backups, or copies subject to provider technical cycles may disappear later, in accordance with provider contracts and obligations.
Your rights
Depending on the law applicable to your situation, you may request access to, correction or deletion of your data, restriction of processing, portability, or object to certain processing. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing. Some rights are subject to conditions and exceptions, including where retention is necessary to comply with an obligation or defend legal rights.
Send your request to privacy@tsalach.ventures. Tsalach may request information strictly necessary to verify your identity and prevent disclosure to a third party. An internal register records the receipt date, systems checked, action taken, and closure date.
Tsalach aims to respond within 30 days and complies with the period required by applicable law. Where the GDPR applies, that period is generally one month and may be extended under the conditions provided by that regulation.
You may also complain to the data protection authority competent for your situation. In Côte d’Ivoire, data protection functions are exercised by ARTCI / the Data Protection Authority. In the European Union, a complaint may in particular be made to the authority of the State of habitual residence, place of work, or alleged infringement.
Security
Tsalach uses measures proportionate to the nature of the data: limited internal access, authentication and two-factor authentication where available, HTTPS encryption, limited form fields, no uploads, anti-spam controls, access reviews, and deletion procedures. Providers also state that they apply their own security measures.
No Internet transmission or storage can be guaranteed to be completely secure. In the event of an incident, Tsalach assesses its scope, takes containment measures, and makes any notifications required by applicable rules.
Vulnerabilities may be reported to security@tsalach.ventures.
Artificial intelligence
The form and requests are processed manually and are not sent to any artificial intelligence model. The website may describe projects that use AI, but this does not mean that form data is used by those products. See AI Governance.
Minors
The website is intended for a professional audience and is not designed for minors. Tsalach does not knowingly seek to collect their data. If you believe that a minor has submitted data, contact privacy@tsalach.ventures so that the situation can be reviewed and the information deleted where appropriate.
Changes
This policy may be updated to reflect changes to the website, providers, practices, or applicable rules. The date and version at the top of the page will be updated. If a change materially affects the use of data, additional notice or a new choice will be provided where required.
Contact
For any question or request relating to personal data: privacy@tsalach.ventures.
TSALACH VENTURES LLC
30 N Gould St, Ste R, Sheridan, WY 82801, USA
Public operational address: Abidjan, Côte d’Ivoire.