Skip to content
Menu

Legal

Privacy policy

This policy covers tavramarketplace.com before launch: the public pages and the waitlist. Tavra takes no payments and creates no accounts here. When accounts open, a full privacy policy for the product will be shown for you to accept before you use it.

Effective November 14, 2026

What we collect

Only what the waitlist form asks for, plus how you reached us:

  • Your email address.
  • Whether you want to post work or do paid work.
  • If you post work: your organization's name and type, your expected monthly spend range, the kinds of tasks you'd post and the tools you use.
  • If you want paid work: the kinds of tasks you'd like, and your confirmation that you live in the United States and are 18 or older (we store the time you confirmed it, not your age or address).
  • Optionally, platforms you've used before and how you heard about Tavra.
  • Whether you asked for product news by email when you confirmed your address, with the time and the wording you agreed to.
  • Whether your browser sent a Global Privacy Control signal when you joined.
  • How you reached us, if your link carried one: a referral code, a campaign tag (utm parameters) or a migration-guide link, plus the page you landed on, the name of the website that sent you and the time.
  • The times you joined and confirmed your email.

What we don't collect

No analytics or advertising scripts run on this site, and no third-party cookies are set by Tavra. We don't store your IP address or browser details with your entry. We never ask for payment details, identity documents or your date of birth here.

Cookies

If you arrive through a link with a referral code, a campaign tag or a migration-guide link, we set one first-party cookie, tavra_ch, holding only those values, the landing page, the referring site's name and the time. It is not readable by scripts, lasts 30 days and is read once, when you join the waitlist. On the waitlist page, Cloudflare's security check may set its own cookies to tell people from bots.

Why we use it

  • To run the waitlist: confirm your email, send your invite and tell you when accounts open.
  • To plan launch: which tasks, tools and volumes to support first, and which organizations to help set up first.
  • To honor the founding offer: whether your organization joined before the waitlist cutoff.
  • To record referrals and where people heard about us, so we know what works.
  • To keep the waitlist free of automated and abusive sign-ups.
  • To send occasional product news, only if you asked for it.

Who receives it

Tavra does not sell your personal information and does not share it for advertising. These service providers handle it on our behalf, under their own security and privacy terms:

  • Render, which hosts the site and its database in the United States.
  • Cloudflare, which serves the site, protects it from attacks and runs the Turnstile security check on the waitlist form.
  • Our email provider, which delivers confirmation and invite emails.

Global Privacy Control

We honor the Global Privacy Control signal. Tavra doesn't sell or share personal information or use targeted advertising. When your browser sends the signal, the waitlist form also skips Cloudflare's security check, so no request leaves our site for it. We record the signal with your entry and carry your opt-out into your account when accounts open.

How long we keep it

  • Unconfirmed sign-ups are deleted 7 days after they were made.
  • Confirmed entries are kept until 24 months after you're invited or leave the list, then deleted.
  • If you asked for product news, the record of that consent is kept for 3 years after you last used it, as proof of consent.

Your choices and rights

Email [email protected] from the address on the list to see what we hold about you, correct it, get a copy or have it deleted. We'll confirm the request comes from that address and answer within 30 days. If we turn a request down, we'll say why, and you can appeal by replying; someone who didn't handle the first request decides.

To stop product news, use the unsubscribe link in any of those emails or write to the same address.

Age

The waitlist is for adults. Workers must be 18 or older, and we don't knowingly collect information from anyone under 18.

Security

Data is encrypted in transit and at rest. Confirmation links are single-use and stored only as one-way hashes. Access to waitlist data is limited to the people who run Tavra.

Changes

If this policy changes, the new version is posted here with its date. If a change affects how we use information you've already given us, we'll email you first.

Contact

[email protected]

Adapted from Basecamp's open-source policies (https://github.com/basecamp/policies), used under the Creative Commons Attribution 4.0 license.