Privacy policy
This describes what this site actually stores and who can reach it. It is written from the system rather than from a template, so where it says a thing is not collected, nothing collects it.
Last updated
Who we are
XYM Health LLC, doing business as The Cosmetic Manufacturer, PO Box 19667, Portland, Oregon 97280-0667, United States. For anything in this policy, including a request to see or delete your data, write to support@thecosmeticmanufacturer.com.
What we collect, and when
| If you… | We store |
|---|---|
| Read the site | Nothing that identifies you. Aggregate page-view counts only — see Analytics below. Our host, Vercel, sees your IP address to deliver pages and protect the site from abuse. If one address reads ingredient pages far faster than a person can, we record that address, its country, its browser's description and the page, and send them to our team, to stop automated scraping. |
| Join the waitlist | Your email address, your name if you gave one, which side of the marketplace you came in from, and the campaign parameters on the link you followed. |
| Hold an account | Your email address, your name, and which workspaces you belong to. Accounts are invite-only; there is no public signup. |
| Sign in | When you signed in, the IP address it came from and your browser's description of itself (its user agent) — your sign-in history. It is not shown on any page. |
| Use a workspace | While a workspace tab is open, visible and in use, one record per minute: that is how time on the platform is counted. Nothing is recorded while the tab is hidden or left idle, and never what you looked at. |
| Submit a brief | The brief as you wrote it, the shortlist the engine returned, and which manufacturers you asked to be introduced to. |
| Accept an agreement | The record the agreements themselves require: your name, email and company, which agreement and version, the country your company is established in, a fingerprint (hash) of its exact text, the time, your IP address and your browser's user agent — kept with the record, never shown on a page. If your company is in Korea, the consents you gave under the International Addendum. |
| Use the help assistant | Your questions and its answers, with your account, the page you asked from, your IP address and browser's user agent — so our team can review how it is used and keep it from being misused. The questions are answered by an AI model (Anthropic's), sent through a commercial API whose terms exclude training on them. |
| Send a form | Your IP address, briefly, so one address cannot send the waitlist, claim or code forms hundreds of times. Kept only as long as the limit needs it. |
| Book a call | Whatever you give the booking calendar. That booking happens on Google's appointment scheduling under its own privacy policy. |
When it is enabled, a brief a brand submits is also read by an AI model (Anthropic's) to catch anything that would identify the brand to a manufacturer before our team reviews it, and to draft a one-line anonymous summary. It is sent through a commercial API whose terms exclude training on it.
We do not collect payment details on this site, and we do not ask for them. Nothing here processes a card.
Who can see what
This is enforced in the database rather than in the interface, which matters: it means a page cannot show someone something by mistake.
- A brand sees its own briefs and nobody else's.
- A manufacturer sent a brief sees the project, not who is behind it. Your name reaches them only after you confirm the introduction — before that it is not merely hidden from the page, it is not sent to their browser at all.
- A manufacturer never learns who else was shortlisted alongside them.
- Our own staff can see briefs and introductions, because qualifying them is the job — and each account's sign-in history and time on the platform.
- The waitlist is visible to staff only. It is a list of people who did not agree to be visible to each other.
Cookies and browser storage
One cookie, and it only exists once you sign in: a session cookie that keeps you signed in, cleared when you sign out. Reading the public site sets no cookie at all. (Our own staff's accounts can set one more, which lets them see a workspace the way its owner sees it; it does nothing on anyone else's.)
Some workspace preferences — which settings you have toggled, which notices you have dismissed — are kept in your browser's own storage. They stay on your device and are never sent to us.
There are no third-party advertising cookies, no cross-site trackers and no ad pixels on this site.
Analytics
We count page views using Vercel Analytics, which is privacy-preserving by design: it does not set a tracking cookie, does not build a profile of you, and does not follow you to other sites. What we get is how many people read a page, not who they were.
Who we share it with
We do not sell personal data, and we do not share it for advertising. It reaches these service providers because the product runs on them:
| Provider | For |
|---|---|
| Vercel | Hosting the site and counting page views. |
| Supabase | The database, sign-in and file storage. Accounts, briefs, introductions, messages, the waitlist and acceptance records live here. |
| Resend | Delivering the email the platform sends — sign-in and claim codes, introduction and message notices, copies of agreements you accept. |
| Our team's email, and the booking calendar if you book a call. | |
| Anthropic | Only when enabled: reading a submitted brief for anything that would identify the brand, as described above. |
| Discord | Our team's alert channels. A waitlist signup or profile claim posts the name, email address and company given; a brief posts its title and anonymous label, never the brand's name. |
The same list, with exactly what each one receives, is kept at thecosmeticmanufacturer.com/legal/subprocessors.
Manufacturer profiles are a different thing
The manufacturer directory is built from public records about companies — federal registrations, inspection results, enforcement actions and information companies publish about themselves. That is business information, not personal data, and we publish it because a brand deciding where to make a product deserves to see it.
Which brands work with which manufacturers is never published.
If you represent a company and believe something on its profile is wrong, write to us and we will correct it.
How long we keep it
- Waitlist entries, until we launch to you or you ask us to remove you.
- Account and workspace data, for as long as the account exists.
- Briefs, for as long as the account exists. Introduction records are kept with the acceptance and fee records below — they are commercial events between two parties, and neither side is served by them becoming unreconstructable.
- Sign-in history and time-on-platform minutes, for as long as the account exists.
- Help-assistant conversations, for as long as the account exists.
- Acceptance records, introduction records and the records needed to administer fees, even after the account is closed: for the longer of seven years after it closes or the end of the last applicable Revenue Term (International Addendum A3.4). They are the evidence of what was agreed.
Your rights
Write to support@thecosmeticmanufacturer.com and ask for a copy of what we hold about you, a correction, or deletion. We will do it. If you are in California, the CCPA gives you those rights explicitly, along with the right not to be discriminated against for using them — and since we do not sell personal data, there is nothing to opt out of.
Children
This is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18.
Changes
If this policy changes in a way that affects what we collect or who sees it, we will change the date at the top and, where the change is material and we can reach you, tell you directly.