Privacy Policy
Effective and last updated 23 August 2026
Intelster is operated by Midstream Collective ("Midstream Collective", "we", "us" or "our"). This Privacy Policy explains what personal information we collect through intelster.com, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It applies to this website. Plain language is deliberate: if anything here is unclear, email marcus@midstreamcollective.com and we will explain it.
Notice at collection — the short version
- You can browse and search without an account and without telling us who you are.
- If you create a member account, we hold your email, a hashed password, and the leads and notes you choose to save in your Black Book. That is yours — private to your account, never sold, never shared for advertising. See Section 12.
- We set no cookies: no advertising cookies, no analytics cookies, no third-party trackers or pixels. Four small preferences — your light or dark view, whether you dismissed the notice bar, which leads the Rainmaker has already shown you, and the working area you chose in My setup — are kept in your own browser and never sent to us. We do not see them, and they are not an account. See our Cookie Notice.
- In normal use the only personal information involved is what your browser sends to load a page, which our host records in server logs: your IP address, the approximate state it resolves to, and technical details of the request.
- We use that to deliver and secure the site. We keep it for a short operational period.
- We do not sell your personal information and we do not share it for cross-context behavioural advertising. We never have.
- We do not collect sensitive personal information.
- California residents: your specific rights are in Section 10.
1. Personal information we collect
Automatically, when you visit the site
Our hosting provider records standard server request information so that pages can be delivered and the site protected from abuse: your IP address, the approximate country and state it resolves to, the pages you requested, the date and time, the referring page, and your browser, operating system and device type.
When you contact us
If you email us we receive your email address, your message, anything you attach, and whatever you choose to tell us about yourself or your company.
What we do not collect
- No cookies, pixels, fingerprinting, session recording or third-party analytics. The four preferences described in the Cookie Notice stay on your device.
- No precise geolocation.
- No payment card details. Paid tiers are not live yet.
- No sensitive personal information as that term is defined under California law, and no special category data under UK or EU law.
2. How we use personal information
- To deliver the website and the project data it displays.
- To keep the site available, diagnose faults and investigate abuse, attacks or excessive automated scraping.
- To understand aggregate usage patterns in order to improve the service. This is done from server logs in aggregate, not by tracking individuals.
- To answer you when you write to us, and to keep a record of what was discussed or agreed.
- To comply with law, respond to lawful requests, and establish or defend legal claims.
We do not use personal information for automated decision-making that produces legal or similarly significant effects, and we do not use it for profiling or behavioural advertising.
3. Our legal grounds for using it
Where UK or EU data protection law applies, we rely on our legitimate interests in operating, securing and improving a business information service, and on your consent where you choose to contact us. Where we rely on consent you may withdraw it at any time. Where we are required to retain information by law, we rely on that legal obligation.
4. How we share personal information
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We use a small number of service providers, who process information only on our instructions and for no purpose of their own:
| Provider | What they do | What they process |
|---|---|---|
| Vercel Inc. | Website hosting, content delivery and edge security | Server request logs, including IP address |
| Microsoft Corporation | Our business email | Correspondence you send us |
| GoDaddy | Domain registration and DNS | Domain records; no visitor data |
We may also disclose personal information where we are legally required to, in response to lawful process, to protect the rights, property or safety of Midstream Collective or others, or in connection with a merger, financing or sale of all or part of the business. If that last one ever happens, the buyer stays bound by this policy for information collected under it.
5. Project data is business information
The project records shown on Intelster describe companies, facilities and infrastructure projects. They are compiled from public regulatory filings, agency databases, company announcements, press releases and outside industry sources. We publish only what we can attribute to a source, and leave a field blank rather than guess at it.
Where a record names a person acting in a business capacity, it came from a public source. If you believe a record about you is inaccurate or should not be published, write to marcus@midstreamcollective.com and we will review it and correct or remove it where appropriate.
6. How long we keep personal information
| Information | How long | Why |
|---|---|---|
| Server request logs | Short operational period, generally not more than 30 days | Delivery, troubleshooting and abuse prevention |
| Email correspondence | For as long as the business relationship or a legal or tax reason requires, then reviewed and deleted | Answering you and keeping a record of what was agreed |
| Records of privacy requests | As long as required to show we handled the request, generally 24 months | Legal obligation to demonstrate compliance |
7. Security
The site is served only over HTTPS. Administrative and email accounts use multi-factor authentication, and access to systems is limited to those who need it. No method of transmission or storage is completely secure; if we become aware of a breach affecting personal information we will notify affected individuals and regulators as the law requires.
8. Children's privacy
Intelster is a business tool intended for people acting in a professional capacity. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, write to marcus@midstreamcollective.com and we will delete it.
9. International data transfers
Midstream Collective is based in Texas, United States, and our providers are United States companies serving the site from a global content delivery network. Information may therefore be processed in the United States and other countries. Where required for transfers out of the UK or EEA, our providers rely on the applicable standard contractual clauses.
10. Information for California residents
This section supplements the rest of this policy and applies to residents of the State of California. It is provided under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA") and the California Online Privacy Protection Act. Terms used in this section have the meanings given to them in the CCPA.
Intelster is available to California residents. We do not sell personal information, we do not share personal information for cross-context behavioural advertising, and we do not collect sensitive personal information. Because of that, there is nothing for you to opt out of and no "limit the use of my sensitive personal information" right for us to offer — but every other California right below is real and we honour it.
10.1 Categories of personal information collected in the last 12 months
| Category | Collected? | What, specifically | Source |
|---|---|---|---|
| A. Identifiers | Yes, limited | Internet Protocol (IP) address of the device requesting a page. Your name and email address only if you choose to email us. | Directly from you; automatically from your browser request. |
| B. Personal information listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) | Only if you volunteer it | Name, company, telephone number or postal address, if you include them in a message to us. We do not ask for financial account or card numbers and none are collected on this site. | Directly from you. |
| C. Protected classification characteristics under California or federal law | No | Not collected. | — |
| D. Commercial information | No | The site sells nothing today. No purchase or consumption history is collected. | — |
| E. Biometric information | No | Not collected. | — |
| F. Internet or other similar network activity | Yes | Pages requested, date and time, referring page, browser type and version, operating system and device type, recorded by our host in standard server logs. | Automatically from your browser request. |
| G. Geolocation data | Yes, approximate only | The approximate country and state that your IP address resolves to. No precise or device location is collected; nothing on this site reads your GPS. | Derived from your IP address by our hosting provider. |
| H. Sensory data (audio, electronic, visual, thermal, olfactory) | No | Not collected. | — |
| I. Professional or employment-related information | Only if you volunteer it | Your job title, employer or industry role if you include them in a message to us. | Directly from you. |
| J. Non-public education information | No | Not collected. | — |
| K. Inferences drawn to create a profile | No | We do not profile visitors, score them, or infer preferences, characteristics or behaviour. | — |
Sensitive personal information: none is collected, used or disclosed.
10.2 Business or commercial purposes for collecting it
The purposes listed in Section 2 above: delivering the website, securing it and preventing abuse, improving the service in aggregate, responding to your enquiries, and complying with law. We do not use personal information for any purpose materially different from those disclosed here without telling you first.
10.3 Categories disclosed for a business purpose in the last 12 months
Identifiers (IP address), internet or network activity information and approximate geolocation are disclosed to our hosting provider as a service provider, because a request cannot be served without them. Identifiers and anything you volunteer in a message are disclosed to our email provider as a service provider. Nothing else is disclosed.
10.4 Sale and sharing
Midstream Collective has not sold, and does not sell, the personal information of California residents, including the personal information of anyone we know to be under 16. We have not shared, and do not share, personal information for cross-context behavioural advertising.
10.5 Your California rights
- Right to know. You may request the categories of personal information we collected about you, the categories of sources, the business purpose for collecting it, the categories of third parties to whom we disclosed it, and the specific pieces of personal information we hold about you.
- Right to delete. You may request that we delete personal information we collected from you, subject to the exceptions the CCPA allows, such as completing a transaction, security and integrity, or complying with a legal obligation.
- Right to correct. You may request that we correct inaccurate personal information we hold about you.
- Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. If that ever changes, we will post a clear "Do Not Sell or Share My Personal Information" link before it does.
- Right to limit the use of sensitive personal information. We do not collect sensitive personal information, so this right does not arise.
- Right to non-discrimination. We will not deny you service, charge you a different price, or provide a different level or quality of service because you exercised any of these rights. We offer no financial incentives in exchange for personal information.
10.6 How to submit a request
Email marcus@midstreamcollective.com with the subject line "California privacy request" and tell us which right you are exercising. Midstream Collective operates exclusively online, so email is the designated method for submitting requests.
How we verify you. Because we hold so little, verification is usually simple: we match the request against the information we actually have, such as the email address that corresponds with us. For a request for specific pieces of personal information we apply a heightened standard and may ask you for additional information to establish that you are who you say you are. We use anything you send us for verification only, and delete it afterwards. If we cannot verify you, we will tell you why and, where the CCPA permits, respond at the category level instead.
How quickly we respond. We confirm receipt within 10 business days and respond substantively within 45 calendar days. If we need more time we will tell you within that period and take no more than a further 45 days.
Authorized agents. An authorized agent may submit a request on your behalf if they provide written permission signed by you, or a valid power of attorney. We may still contact you directly to confirm the request and to verify your identity.
10.7 Do Not Track and Global Privacy Control
Intelster does not track visitors across other websites or over time, so there is no cross-site tracking to disable. We do not respond differently to browser Do Not Track signals, because we do not engage in the tracking those signals are meant to stop. We recognise opt-out preference signals such as Global Privacy Control; as we neither sell nor share personal information, such a signal requires no change to how we handle your data.
10.8 Shine the Light
California Civil Code section 1798.83 lets California residents ask a business whether it disclosed personal information to third parties for those third parties' direct marketing purposes. We do not, and never have. You may confirm this by writing to marcus@midstreamcollective.com.
10.9 California residents under 18
Accounts are for people acting in a professional capacity, and the site hosts no public user-posted content, so there is nothing for a minor to have published here. If a California resident under 18 has sent us information they want removed, write to marcus@midstreamcollective.com and we will remove it.
11. Information for other United States residents
We extend the same substantive treatment to residents of every state with a comprehensive consumer privacy law, including Texas, where we are based, as well as Colorado, Connecticut, Virginia, Utah, Oregon, Montana and others as they take effect. In summary: we do not sell your personal data, we do not process it for targeted advertising or profiling, and we do not collect sensitive data. You have the right to confirm whether we process your personal data and to access, correct, delete or obtain a portable copy of it, and to appeal a decision we make on such a request. Submit any of these to marcus@midstreamcollective.com. If we decline your request, you may appeal by replying to our decision, and we will respond to the appeal within 60 days. Texas residents may also contact the Texas Attorney General's office; residents of other states may contact their own Attorney General.
12. Accounts, the Black Book, and paid subscriptions
Intelster offers a member area where you can create an account. Using the site without an account involves none of what follows.
What an account collects
- Your email address and a password. The password is never stored in readable form; our authentication provider stores only a cryptographic hash of it.
- A sign-in token, kept in your own browser so you are not asked to log in on every page. Clearing your browser data signs you out.
- Whatever you put in your Black Book. The leads you save, the notes and field information you add to them, and any call outcomes you log.
- Basic account activity needed to run the service: when the account was created, which access tier it holds, and any demo or invitation code redeemed.
Who can see your Black Book
You can. It is private to your account and enforced at the database level, not merely hidden in the interface. No other member sees your saved leads or your notes. If your account belongs to a company account, what the company can see is governed by that company's own arrangement with us and is described to you before it applies.
What we do with account data
We use it to run the service, to keep your work available to you across your devices, to support you when you ask, and to enforce access tiers. We do not sell it, we do not share it for advertising, and we do not use the contents of your Black Book to build a product for anyone else without asking you first.
Deleting an account
Email marcus@midstreamcollective.com and we will delete the account and its Black Book contents. Backups roll off within 30 days. Records that we must keep for legal or tax reasons are kept and nothing else.
Payments
Paid tiers are not live yet. When they are, this policy will be updated before the first payment is taken, to name the payment processor and confirm that card details are handled by that processor and never stored by us.
Data processors for the member area
Supabase Inc. hosts the member database and authentication on our behalf, in the United States, and processes it only on our instructions.
13. Changes to this policy
If we change this policy we will update the date at the top. If the change is material we will say so prominently on the site before it takes effect.
14. How to contact us
Midstream Collective, Texas, United States.
Privacy enquiries and rights requests: marcus@midstreamcollective.com
If you are in the UK or EEA and are unhappy with our response you may complain to your national data protection authority. If you are in California you may also contact the California Privacy Protection Agency or the California Attorney General.