Privacy Policy

TraceHawk ("we", "us", "our") operates the TraceHawk platform accessible at tracehawk.dev and associated services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

By using our services, you agree to the collection and use of information in accordance with this policy.

Account information: When you create an account we collect your name, email address, and organization name.

Telemetry data: We store OpenTelemetry spans you send to our ingest endpoint. This data is associated with your organization and used to power the observability dashboard.

Usage data: We collect anonymized usage metrics (page views, feature usage) to improve the product. We do not sell this data.

Payment data: Payments are processed by Paddle. We do not store credit card numbers. Paddle's privacy policy governs payment data.

We use your information to: provide and maintain the service, process payments, send transactional emails (account setup, alerts), respond to support requests, and improve the product.

We do not sell, rent, or share your personal data or telemetry data with third parties for marketing purposes.

Telemetry spans are retained according to your plan: 7 days (Free), 30 days (Pro), 90 days (Business), 1 year (Enterprise). Account data is retained for the lifetime of your account and deleted within 30 days of account closure upon request.

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. We host on Railway infrastructure in the United States. We conduct regular security reviews and follow OWASP guidelines.

You have the right to: access your personal data, correct inaccurate data, request deletion of your data, export your data in a portable format, and opt out of non-essential communications.

To exercise these rights, email us at privacy@tracehawk.dev. We respond within 30 days.

We use strictly necessary session cookies for authentication. We do not use advertising cookies or third-party tracking pixels.

We use the following third-party services: Railway (hosting), Paddle (payments), Resend (transactional email), Redis (session/cache). Each has their own privacy policy.

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice in the dashboard. Your continued use of the service after changes constitutes acceptance.

Privacy inquiries: privacy@tracehawk.dev