Tracemill Privacy Notice
Version: privacy-v1
Effective date: September 12, 2026
1. Scope
In this notice, our public website or marketing site means tracemill.io, including its documentation pages. Tracemill Cloud means the hosted customer service, including the app at app.tracemill.io and its APIs. These are distinct surfaces: we use Plausible on tracemill.io, not in the Tracemill Cloud app at app.tracemill.io.
Tracemill, Inc., a Delaware corporation, processes personal information for its own account, website and business purposes as described here. Customer-controlled memberships, invitations, roles, activity/audit records, samples, detections and evidence are instead processed on the customer's behalf under our DPA. Roles follow purpose and law, not a field's location. A shared identifier does not authorize independent reuse of customer content.
This notice explains practices, not consent to all processing or a waiver of rights. The initial self-service offering is intended for US-based business/professional customers; users must be 18. We do not direct the Service to children. Contact us if a child has supplied information directly.
2. What we collect and why
We receive information from you, your organization's authorized users, activity in Tracemill Cloud, visits to tracemill.io and download requests, identity/payment providers and your communications. The table distinguishes public-website analytics from Cloud account and operational processing.
| Information | Purpose and recipients |
|---|---|
| Cross-workspace login identity, name/work email, session/credential verifiers and platform access/security metadata | Account operation, authentication, platform security; hosting/authentication providers and authorized personnel. Customer-specific membership/activity remains under the DPA. |
| Billing contacts, subscription/usage charges, invoices, payment status and limited payment-method metadata | Payment, tax/accounting and dispute handling; Stripe, hosting providers and relevant advisers. Stripe collects payment details through its interfaces. |
| Visits to tracemill.io: page requests, IP/browser/device details, referrals, approximate IP-derived location and outbound-link interactions | Public-website delivery/security and readership measurement; hosting/content-delivery providers and Plausible. Plausible does not measure activity inside app.tracemill.io. |
| Download requests: requested files, request times, IP addresses and browser/client information | Deliver and secure downloads and measure download activity; hosting/content-delivery providers. A download-link click on tracemill.io may separately be measured by Plausible; download-server logs are not Plausible app analytics. |
| Communications, business contacts and feedback | Requested support and business communication; authorized personnel and email service providers. Customer content in support retains DPA protections. |
| Accepted document/version evidence and privacy-request records | Demonstrate agreement, honor rights and meet legal duties; restricted personnel/providers and relevant advisers/authorities. |
| Minimal signup-email matching record and trial-used indicator | Enforce one standard trial per email, including after account deletion. Restricted eligibility personnel/providers only, not marketing or product analytics. |
| Minimal deletion identifiers/scope/timestamps/status | Enforce/verify deletion and prevent reappearance after restoration. Customer-directed records stay under the DPA; restricted personnel/providers only. |
| Operational measurements: service performance, reliability and billing measurements; we may also collect account-linked feature-use measurements | Operate, secure, bill for and improve the Service within the Terms' Operational Data limits; authorized personnel and providers supporting those functions. Exclude raw payloads, private logic, credentials and customer-specific validation evidence. |
Required account/payment details enable the requested service; withholding them may prevent signup, payment or support. Do not send live credentials or unnecessary sensitive information through ordinary messages. Authentication information may be sensitive personal information under applicable law; it is used for access/security, not to infer personal characteristics.
3. Cookies and providers
Tracemill Cloud at app.tracemill.io uses essential login/session cookies and browser storage for interface preferences, onboarding continuity and dismissed invitations. Blocking necessary cookies can prevent login. Identity and payment providers operate their own interfaces and cookies. The public website at tracemill.io may also store interface preferences.
Plausible is used on tracemill.io, including for outbound-link measurement, not within the Tracemill Cloud app at app.tracemill.io. Its standard service describes cookieless aggregate analytics using transient IP/browser information. This does not mean Tracemill Cloud uses no cookies or collects no account, billing or operational information. See Plausible's data policy.
Sentry receives operational diagnostics; our configured filters and disabled default PII collection do not establish that every event is anonymous.
Our own application code does not change collection in response to Do Not Track or Global Privacy Control signals. We do not sell personal information or share it for targeted advertising, regardless of those signals. Third-party identity and payment interfaces have their own privacy practices and browser controls.
Providers include AWS for hosting, authentication and authentication emails; Stripe for billing; Sentry for diagnostics; Plausible for public-website measurements on tracemill.io only (not activity within app.tracemill.io); and email service providers for customer correspondence and support. We use appropriate contracts for processing on our behalf; providers may independently process limited information for their own legal/payment obligations. Customer-chosen destinations and AI/MCP clients receive requested information under Customer's arrangements, not automatically under our no-training promise.
We may disclose necessary information to authorized workspace administrators, advisers under confidentiality, authorities as law requires, or parties to a corporate transaction under appropriate safeguards. Such disclosure does not expand permitted Customer Data uses.
We do not sell personal information or use or share it for cross-context behavioral or targeted advertising. Disclosures to providers to operate the Service are described above.
4. Retention, security and location
The Retention Schedule gives periods or necessity criteria for the customer and account information it addresses. Minimal trial-eligibility data may remain without fixed expiry while the one-trial rule remains in effect and retention remains necessary/lawful, with periodic review and applicable rights. A matching email hash is not automatically anonymous. That record does not preserve trial content. Minimal deletion records end when recoverable copies expire and verification completes, unless limited evidence is legally required longer.
We use reasonable safeguards, not a guarantee of absolute security. Core hosting is configured in the United States, including a separate US backup region. AWS, Sentry and Microsoft 365 store, process and access the information they handle for us in the United States. Tracemill personnel access this information from the United States. US customer location does not itself eliminate transfer obligations. This notice does not implement a transfer mechanism or claim certification.
5. Choices, requests and updates
Depending on applicable law, you may request access/copy, correction, deletion or portability; object to/restrict processing; withdraw consent; exercise applicable sale/sharing/targeted-advertising choices; appeal a denial; or complain to the relevant authority. Exceptions and proportionate identity/authority verification apply. We will respond within applicable deadlines and not discriminate for exercising protected rights. No eligibility rule automatically exempts records from those rights.
Email support@tracemill.io with “Privacy request” or “Privacy appeal”; agents may act with appropriate authority. Do not send passwords or sensitive identity documents without an agreed secure method. If your request concerns Customer-controlled data, identify the organization if possible; we will seek clarification or assist the reasonably identifiable customer. Use available account settings for corrections and contact us about incorrect trial matches.
You may unsubscribe from marketing communications if sent; necessary service, billing/security and contract notices continue.
We identify the effective date and notify material changes by prominent site notice or direct communication as appropriate, obtaining additional consent where required. Updating this notice does not amend accepted customer-data permissions or contracts.
Contact support@tracemill.io or Tracemill, Inc., Attn: Privacy, 2261 Market Street STE 80557, San Francisco, CA 94114, United States. Privacy requests do not require certified mail.