Privacy policy

Scope

This policy explains what personal data Traack collects, why, and what rights you have over it. It covers visitors to traack.ai and people who use the Traack application.

For evidence your organisation uploads to Traack, your organisation is the controller and Traack processes it on their instructions under our agreement with them. This policy covers the data Traack controls directly: your account, your use of the service and your contact with us.

What we collect

• Account data: your name, work email address, organisation and sign-in method. We never store passwords.
• Usage data: the threads you create, files you upload, integrations you connect and the actions you and the agent take, together with the timestamps needed for the audit log.
• Technical data: IP address, browser type and approximate location, used for security and to keep the service working.
• Contact data: anything you send us when you book a demo, ask for support or report a problem.

How we use it

• To provide the service, including running the agent on your requests and keeping your workspace isolated.
• To keep the service secure, detect abuse and maintain the audit log your organisation relies on.
• To support you and respond to your requests.
• To send service notices, such as changes to these terms or security incidents. We do not send marketing email without your consent.

No training on your data

Evidence and personal data you upload are used only to perform the work you ask for. They are never used to train any model, ours or a third party's. Model providers we use operate under zero data retention agreements and do not store prompts or responses after a request completes.

Who we share it with

We share personal data only with subprocessors that help us run the service, such as cloud hosting, identity, model and email providers, each under a contract that restricts them to our instructions. We may also disclose data where the law requires it. We do not sell personal data. The current subprocessor list is available on request.

How long we keep it

Account and usage data are kept for as long as your organisation has an active agreement with us, then deleted within 30 days of a written request or the end of the contract. Audit log entries may be kept longer where your organisation asks us to for its own compliance needs. Technical logs are kept for 90 days.

International transfers

Traack is operated from the United States and your data may be processed there. Where data is transferred from the United Kingdom or European Economic Area, we rely on standard contractual clauses or an equivalent lawful mechanism.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict how we use it, and to complain to a supervisory authority. To exercise any of these rights email hello@traack.ai. If your request concerns evidence uploaded by your organisation, we will pass it to them, since they control that data.

Cookies

The marketing site uses only the cookies needed for it to work. The application uses a session cookie to keep you signed in. We do not use advertising trackers.

Changes and contact

We may update this policy from time to time and will post the new version here with a new date. Material changes will be notified to your account contact. Questions about this policy can be sent to hello@traack.ai.