Privacy Policy

This Privacy Policy explains how Tracehunters collects, uses, stores, and shares personal information when you use our website, create an account, purchase a subscription, collaborate with others, or use our investigation tooling and related services.

1. Information We Collect

We collect information in a few different ways depending on how you use the service.

Information you provide directly

• Account information, such as email address, optional name, and password
• Profile and team information, such as team invitations, collaborator details, and account settings
• Subscription and billing-related information, such as plan selection, billing status, and payment processor customer or subscription IDs
• Communications you send to us, including support, legal, privacy, verification, and password reset requests

Investigation and workspace content

We process the content you create or upload in the product, such as investigation workflows, nodes, notes, uploaded files, report content, timeline events, metadata extracted from files, and collaborative changes. Depending on how you use the service, this content may contain personal, confidential, or sensitive information about other people or organizations.

Information collected automatically

When you use the site or application, we and our service providers may automatically collect service, diagnostic, usage, and device information, including:

• IP address and approximate location derived from IP or request data
• Browser type and version, operating system, device type, language, and performance data
• Referring URLs, route or page URLs, timestamps, and interaction data
• Product analytics events, such as signup, login, subscription, workflow, node, and timeline activity
• Cookie, session, and local storage preference data required to operate or remember parts of the service

Security-related information

We use session cookies and encrypted session-related storage to keep you signed in and protect account access. Passwords are stored in hashed form, not plain text.

2. How We Use Information

We use personal information to operate and improve the service, including to:

• Create and manage user accounts, authentication, teams, invitations, and access control
• Provide core product features, including investigation workflows, collaboration, uploads, reporting, and timeline management
• Process subscriptions, recurring billing, payment setup, cancellations, and payment-related support
• Send transactional emails such as verification, welcome, team invite, and password reset messages
• Monitor reliability, performance, product usage, security events, abuse, fraud, and unauthorized access
• Analyze product usage and improve features, onboarding, pricing flows, and stability
• Comply with legal obligations, enforce our terms, and respond to lawful requests

3. Cookies and Analytics

We use cookies, similar technologies, and local storage to operate the service and remember certain preferences. We also use analytics and performance tooling to understand how the website and product are used and to diagnose performance problems.

Our current tooling may include providers such as:

• Vercel Analytics and Speed Insights for website and performance analytics
• PostHog for product analytics and event tracking
• Session and preference storage required for authentication and product functionality

We do not currently use the service to deliver third-party targeted advertising on the site. You can also manage cookies through your browser settings, although some features may stop working properly if essential cookies are disabled.

4. When We Share Information

We may share information with trusted service providers that help us operate the service, including:

• Hosting, storage, database, and infrastructure providers
• Payment processors such as Mollie
• Email delivery providers such as Mailgun
• Analytics and performance providers such as Vercel Analytics, Speed Insights, and PostHog
• Real-time collaboration and communications providers such as Pusher

We may also disclose information if required by law, to protect rights and safety, to investigate fraud or misuse, or in connection with a merger, financing, acquisition, reorganization, or sale of assets.

5. International Transfers

We and our service providers may process information in the United States, the European Union, and other countries where we or our providers operate. Where required, we take reasonable steps to use lawful transfer mechanisms and safeguards for cross-border processing.

6. Data Retention

We keep personal information for as long as needed to provide the service, maintain account security, process payments, keep required business and tax records, resolve disputes, enforce our agreements, and meet legal obligations.

• Account and workspace data are typically retained while your account is active or until deletion is requested
• Billing, tax, fraud-prevention, and security records may be retained longer where required or justified
• Backups and logs may remain in secure systems for a limited period before deletion or overwrite

7. Data Security

We use technical, organizational, and contractual safeguards designed to protect personal information. These measures include authentication controls, hashed passwords, encrypted session handling, and encryption for supported investigation data flows. No system is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on where you live, you may have rights such as:

• Accessing, correcting, exporting, or deleting personal information we hold about you
• Objecting to or restricting certain processing
• Withdrawing consent where processing is based on consent
• Managing account details directly through your account settings where available

To make a privacy request, contact us at legal@tracehunters.app. We may need to verify your identity before we act on a request.

9. Children's Privacy

The service is not intended for children under 18, and we do not knowingly collect personal information from children under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the product, our providers, or applicable law. When we do, we will update the date at the top of this page.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise a privacy right, contact us at legal@tracehunters.app. For product support, you may also contact us through the channels made available in the service.

12. Important Note About Investigation Content

Tracehunters is a tool that customers can use to organize investigations and analyze information from many sources. You are responsible for ensuring that you have a lawful basis to collect, upload, use, and share any personal information or sensitive content you place into the service, and for complying with any laws that apply to your investigations or reporting activities.

If you process personal information on behalf of other people or organizations, you may act as an independent controller or another regulated party under applicable law. In those cases, you are responsible for your own compliance obligations in relation to that information.

This page is intended to describe the service as it is currently implemented in this repository. You should review it again before launch and after any material changes to analytics, payments, infrastructure, or data handling.

If you need a separate privacy contact address, you may also write to privacy@tracehunters.app