∙ legal

Privacy Policy

This policy explains what information Trace ("Trace," "we," "us") collects through this website, how we use it, and the choices you have.

1. Information we collect

Information you provide

When you submit a demo request, assessment request, or contact form, we collect the details you enter, typically your name, work email, company, the number of vendors you manage, and any message you include. We use this solely to respond to your inquiry and discuss our services.

Vendor Risk Playground & Trace gap analysis

The interactive Vendor Risk Playground runs in your browser; the vendors and scores you model are not transmitted to us. The optional Trace gap analysis tool is different: when you choose to run it, the control text you paste is sent to our hosting provider's serverless function and on to a third party AI provider to generate the analysis. We do not store that text, and the tool caps input length.

Automatically collected information

Our hosting provider may log standard technical data (IP address, browser type, pages requested) for security and operational purposes. We do not use advertising trackers. If we add analytics in the future, we will update this policy and honor applicable consent requirements.

2. How we use information

• To respond to your requests and provide the services you ask about;
• To operate, secure, and improve this website;
• To meet legal, regulatory, and contractual obligations.

We do not sell your personal information.

3. Service providers

We rely on a small number of vendors to operate this site, including a website host and forms processor (Netlify) and a third party AI provider that powers the optional Trace gap analysis feature. These providers process data on our behalf under their own terms and security commitments.

4. Data retention

We keep inquiry submissions only as long as needed to respond and maintain our business records, then delete or anonymize them. Text submitted to the Trace gap analysis tool is processed transiently and is not retained by us.

5. Your rights

Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal information, and to object to certain uses. To exercise any of these rights, contact us through our demo request form. We will respond within the timeframe required by applicable law.

6. Security

We apply reasonable administrative and technical safeguards appropriate to the sensitivity of the information we handle. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

7. Children's privacy

This site is intended for business use and is not directed to children under 16. We do not knowingly collect information from children.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent revision.

9. Contact

Questions about this policy or our privacy practices: reach us through our demo request form.