Privacy Policy

Overview

Petrarch, Inc. ("Petrarch," "we," "us") operates a marketplace for specialized AI training datasets. This Privacy Policy explains how we collect, use, and protect information when you use our website and services.

Petrarch's model is built on anonymization. Before any dataset is listed or transferred, we run it through a rigorous PII removal and anonymization pipeline — differential privacy, PII redaction, and compliance review. We only retain clean, anonymized data. Raw source data is scrubbed after processing.

Information We Collect

From visitors and users

• Contact information you provide (name, email, company) when submitting a data request or seller inquiry
• Communications you send us via email or through the site
• Standard web analytics (page views, referrer, browser type) — no cross-site tracking

From sellers

• Business and entity information for provenance verification and chain-of-custody documentation
• Data samples and datasets submitted for evaluation — these are processed and anonymized before any further use
• Contractual records (sell-side agreements, NDAs)

From buyers

• Organization details and intended use case for each dataset acquisition
• Transaction records and licensing agreements

How We Use Information

• To evaluate, process, and anonymize datasets submitted by sellers
• To match buyer requests with appropriate datasets
• To communicate about transactions, updates, and support
• To maintain legal records as required by our agreements with Wilson Sonsini
• To comply with applicable law

We do not sell personal information. We do not use buyer or seller contact information for advertising.

Data Anonymization

All datasets transacted through Petrarch are processed through our anonymization pipeline prior to transfer. This includes PII redaction, differential privacy techniques, and a compliance review. We commit to using "commercially reasonable efforts" for PII removal — we do not guarantee perfection, and buyers are expected to conduct their own due diligence. Sensitive data categories (PHI, regulated financial data, consumer financial records) are out of scope for our current marketplace.

Data Broker Compliance

Depending on the nature of data processed, Petrarch may be subject to data broker registration requirements in certain U.S. states. We are actively working with our legal counsel to ensure compliance with all applicable data broker laws, including recent statutory changes effective in 2026.

Data Retention

Raw source data submitted by sellers is scrubbed after anonymization is complete. Anonymized datasets are retained as long as they are listed on the marketplace or held under license. Transaction records and contracts are retained as required by law and our agreements.

Third Parties

We use DocuSign for contract execution and standard cloud infrastructure for hosting. We do not share personal information with third parties except as necessary to operate the platform or as required by law.

Security

Petrarch is pursuing SOC 2 Type 1 certification. We implement appropriate technical and organizational measures to protect information against unauthorized access, loss, or disclosure.

Contact

For privacy questions or requests, contact us at founders@petrarch.co.