Traceraft respects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect information when you use the Traceraft website, application, and related services.

Traceraft is a developer-focused service that allows users to create profiles, post development logs, manage content, and build a public proof-of-work profile.

1. Information We Collect

We may collect the following categories of information:

• Account information, such as your email address, authentication provider information, and basic account identifiers.
• Profile information, such as your username, display name, bio, avatar, GitHub URL, X URL, or other profile fields you choose to provide.
• User-created content, such as traces, posts, drafts, editor content, images, version history, and other information you create or upload through the Service.
• Payment-related information, such as your plan type, subscription status, billing period, customer identifier, and payment provider transaction metadata. We do not store full credit card numbers on our own servers.
• Technical information, such as IP address, browser type, device information, operating system, referring pages, access time, usage logs, and security event logs.
• Support information, such as messages, inquiries, bug reports, feedback, and other communications you send to us.

2. How We Use Information

We use collected information for the following purposes:

• To provide, operate, maintain, and improve Traceraft.
• To authenticate users and manage accounts.
• To create, display, update, and manage profiles, traces, posts, drafts, and other user-created content.
• To provide paid features, manage subscription status, enforce plan limits, and process billing-related workflows.
• To respond to support requests, bug reports, inquiries, and service-related communications.
• To monitor, prevent, and investigate abuse, spam, fraud, unauthorized access, security incidents, and violations of our policies.
• To analyze usage and improve the reliability, performance, and user experience of the Service.
• To comply with legal obligations and enforce our rights.

3. Public Content

Traceraft is designed to help users create public proof-of-work profiles. Some information you provide may be publicly visible, including your username, display name, bio, profile links, avatar, public traces, posts, and other content you choose to publish.

Please do not include sensitive personal information, confidential business information, passwords, API keys, private credentials, or other information that you do not want to make public.

4. Payment Processing

If paid plans are offered, payment processing may be handled by a third-party payment provider such as Stripe. We may store subscription-related metadata, such as your plan, subscription status, billing period, customer ID, and subscription ID, in order to provide paid features.

We do not store full credit card numbers, card security codes, or complete payment credentials on our own servers. Payment information is handled by the payment provider according to its own terms and privacy policy.

5. AI-Assisted Features

Traceraft may provide AI-assisted features, such as draft generation, rewriting, summarization, title suggestions, or content improvement support.

If you use AI-assisted features, the content you submit for those features may be sent to an AI service provider in order to generate a response.

You should not submit sensitive personal information, confidential business information, passwords, API keys, private credentials, or other information that you do not want processed by an external AI provider.

AI-generated output may be inaccurate or incomplete. You are responsible for reviewing and editing AI-generated content before publishing or relying on it.

6. How We Share Information

We do not sell your personal information. We may share information only in the following limited cases:

• With infrastructure, hosting, database, authentication, storage, payment, analytics, email, or AI service providers that help us operate the Service.
• When you intentionally publish content or make profile information public through the Service.
• When required by law, regulation, court order, governmental request, or legal process.
• When necessary to protect the rights, property, safety, or security of Traceraft, our users, or others.
• In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate confidentiality and privacy protections.

7. Third-Party Services

Traceraft may rely on third-party services to provide core functionality. These services may include:

• Supabase for authentication, database, and storage.
• Vercel or similar providers for hosting and deployment.
• Stripe or similar providers for payment processing.
• OpenAI or similar providers for AI-assisted features.
• Email or support tools for user communications.

These third-party services may process information according to their own terms, privacy policies, and security practices.

8. Data Storage and Security

We take reasonable technical and organizational measures to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we work to protect the Service using appropriate security practices.

9. Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain user accounts, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and maintain security.

If you delete content or request account deletion, we will take reasonable steps to delete or anonymize applicable information, unless we are required or permitted to retain it for legal, security, fraud prevention, backup, or legitimate business purposes.

10. Your Choices and Rights

Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or restriction of certain personal information.

You may update certain profile information through the Service where available. You may also contact us to request assistance regarding your personal information.

11. International Data Transfers

The Service may use third-party providers located in countries or regions outside your place of residence. By using the Service, you understand that your information may be processed and stored in such countries or regions, subject to applicable law and appropriate safeguards.

12. Children’s Privacy

Traceraft is not intended for children under the age required by applicable law. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take reasonable steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will post the updated version on this page and update the Last updated date. If the changes are significant, we may provide additional notice where appropriate.

14. Contact

If you have any questions, requests, or concerns about this Privacy Policy or our handling of personal information, please contact us at: