Privacy Policy

What we collect, why, and what we never do.

TSA Advisory LLC is a specialist buyer-side advisory firm. The information clients share with us is, by definition, sensitive and often confidential. This page sets out how the firm handles personal and business information on tsaexit.com and across the advisory engagement lifecycle.

Last updated: 13 May 2026

1. Who this policy covers

This policy applies to visitors to tsaexit.com, recipients of the firm's newsletter, downloaders of the firm's white papers, prospects who book a call, and clients who engage the firm under a signed letter. References to "the firm" mean TSA Advisory LLC.

If a client engagement letter contains confidentiality language that goes further than this policy, the engagement letter governs.

2. What we collect

From visitors to tsaexit.com, the firm collects standard server logs (IP address, browser type, referring URL, timestamps) and aggregated analytics data. Cookies set by the site are described in the Cookie Policy.

From prospects and clients, the firm collects names, work email addresses, employer, role and any business context shared during introductory calls. From clients under engagement, the firm receives a working set of documents specific to the matter. That working set is governed by the engagement letter and is treated as confidential client material.

The firm does not collect protected categories of personal data through the site. Forms request only the minimum information needed to respond to the request.

3. How we use information

Visitor data is used to operate the site, measure traffic in aggregate, and improve the content. Prospect and client information is used to respond to inquiries, to deliver advisory services under an engagement letter, and to maintain a client relationship.

Newsletter subscribers receive a single email cadence (the Day One Letter). Subscribers can unsubscribe from any newsletter email and the firm processes the unsubscribe within seven days.

4. What we never do

The firm does not sell personal information. The firm does not share client information with any third party for marketing purposes. The firm does not share information about one client with any other client.

The firm does not engage in seller side TSA work. As a result, information shared in a buyer-side engagement is never used in any seller side capacity, because no seller side capacity exists inside the firm.

The firm does not place client logos on tsaexit.com or in marketing collateral. Public references to engagements are anonymized and generalized, and use only the language a client has approved in writing.

5. Who we share information with

The firm uses a small set of vendors to operate the business: a website hosting provider, an email delivery vendor, a calendaring vendor for booking calls, and a customer relationship management system. Each vendor is bound by a data processing agreement that limits use of personal data to the services provided to the firm.

The firm does not transfer personal information to advertising platforms, data brokers or affiliate networks. There are no such relationships in the firm's vendor stack.

6. Data retention

Server logs are retained for 90 days and then purged. Newsletter subscriber lists are retained for the duration of the subscription plus 30 days after unsubscribe to confirm processing.

Client engagement materials are retained for seven years after the close of the engagement to satisfy professional records obligations, then archived or destroyed according to the engagement letter.

7. Your rights

Depending on the jurisdiction, you may have rights to access, correct, delete or restrict processing of personal information the firm holds about you. You may also have the right to portability and to object to certain processing.

To exercise any of these rights, write to privacy@tsaexit.com. The firm responds within 30 days. There is no charge.

8. International transfers

The firm operates from the United States. Information may be processed in the United States and in other jurisdictions where vendors operate. Standard contractual clauses or equivalent transfer mechanisms are used where required by law.

9. Security

Client engagement materials are stored in encrypted workspaces, access controlled to the engagement team, and protected by multi factor authentication. The firm does not transmit client materials through general purpose email. No system is perfectly secure, but the controls are designed for the sensitivity of the work.

10. Changes to this policy

This policy may change as the firm's vendor stack or applicable law changes. The current version is always at this URL. The "Last updated" date at the top of the page reflects the most recent change.

Questions about this policy go to privacy@tsaexit.com. General inquiries go to contact.