Privacy
This describes what Tracefield collects, why, and who else touches it. It is written to be checked against the code rather than to sound reassuring: the isolation and retention claims below are enforced in the database, and the repository's SECURITY.md states what is not done yet.
What we hold
- Account data. Your email, name if you give one, your workspace name, and a hash of your password. Passwords are hashed with scrypt and are never stored or logged in the clear.
- Documents you upload, the page images rendered from them, and the values extracted with the evidence for each.
- Operational records. Which runs happened, what they cost, which fields a person reviewed and when. Reviews are attributed by name because that attribution is the product.
- Anti-abuse records. A keyed hash of the IP address used for sign-up and failed sign-in attempts. The address itself is not stored.
What we do not do
- We do not train models on your documents, and neither does our model provider under our contract with them.
- We do not sell data or share it with advertisers.
- We do not run third-party analytics or advertising trackers on the application.
Who else processes it
- Anthropic — document contents are sent for extraction and for the Review Agent's investigations.
- Amazon Web Services — hosting, database and object storage.
- Vercel — hosting for the public site.
- Paddle — merchant of record for paid plans; Paddle holds the payment details, we never see them.
Isolation
Every workspace's data is separated in two independent ways: each query joins through the workspace, and PostgreSQL row-level security enforces the same boundary underneath. Reaching another workspace's rows would require defeating both. Requests for data that is not yours are answered as if it did not exist, because a “forbidden” answer would itself reveal that it does.
Retention
Documents and their extracted values are kept until you delete them or close the workspace. Deleting a document removes the stored file and its values. Credit ledger entries survive deletion because they record spend rather than content. Sessions expire and can be revoked from Settings.
Your rights
You can ask for a copy of your data, ask for it to be corrected, or ask for the workspace and everything in it to be deleted. Verified data can be exported from the product at any time without asking us. Write to canakyildz53@gmail.com and we will respond within 30 days.
Breach
If we become aware of a breach affecting your data we will tell you what happened, what it touched and what we did, without waiting until the picture is complete.