Privacy Policy

1. What we collect

Account: your email address, display name, language and sign-in identity (sign-in is handled by Amazon Cognito; we never see your password).

Workspace records: what you and your agents send, such as change summaries, file names, line ranges and commit details, tickets, findings, test runs, evidence files, releases, architecture declarations and plans. Code is stored only if your solution keeps reviewed diffs. Commit author emails are stored pseudonymized.

GitHub: if you connect it, the accounts and repositories you choose. Diffs read from GitHub are shown to you and not stored.

Intake: the bugs, questions and requests your own apps send to your intake links, with the context they include.

Billing: plan, subscription status and Stripe customer reference. Card details are handled by Stripe; we never receive or store them.

Technical data: request logs, error logs and security records needed to run and protect the service.

2. How we use it

To provide the service to your workspace, keep it secure, answer support requests, bill your plan and improve ClearTrace. We do not sell personal data, use it for advertising, or use your workspace data to train AI models.

3. Where it is kept and who can see it

ClearTrace runs on Amazon Web Services in the United States (us-east-1). Each workspace has its own database, encrypted at rest; traffic is encrypted in transit.

Inside your workspace, people see records according to the roles the owners assign. ClearTrace staff who operate the platform see workspace details and counts (plan, usage, activity), not your code, diffs or ticket contents; their access needs a second authentication step and is logged.

We share data only with the providers that run the service for us: Amazon Web Services (hosting, databases, storage, sign-in and email), Stripe (payments), GitHub (only if you connect it) and Google (analytics on the cleartrace.dev site, only if you accept). We may disclose data if the law requires it.

4. How long we keep it

Workspace data is kept while the workspace is active. After a workspace closes, we delete its data within 30 days, unless you ask sooner or the law requires us to keep something; database backups expire within 35 days. Billing records are kept as tax and accounting law requires.

5. Your choices and rights

You can ask to access, correct, export or delete your personal data, or to object to a use of it, by writing to privacy@cleartrace.dev. We answer within 30 days. Depending on where you live (for example in the EU, the UK or California), you may have further rights, including complaining to a data protection authority.

6. Cookies and browser storage

The app keeps your sign-in session and preferences in your browser's storage. The cleartrace.dev site stores your language and theme choice, and your answer about analytics cookies.

Only if you accept, the cleartrace.dev site uses Google Analytics to count visits: the pages you view, the page that sent you, your browser and device type, and your approximate location (country or city). Google Analytics sets its own cookies (_ga) for this, Google processes the data for us in the United States, and it is kept for 14 months. Advertising features are off. The app at app.cleartrace.dev does not use Google Analytics.

You can change your answer at any time with Cookie settings at the bottom of every page; if you decline, the site removes the Google Analytics cookies it set. We use no advertising cookies.

7. Children

ClearTrace is for work use and not directed at children under 16.

8. Changes and contact

If we change this policy in an important way, we will tell workspace owners by email or in the app before it applies.

Questions or requests: privacy@cleartrace.dev. WhoPlays US, Inc., Nocatee, FL 32081, United States.