Privacy notice

Tracewell is operated by Tracewell Software LLC. Contact: info@tracewellintegrations.com. Tracewell helps customers measure the AI usage and automation outcomes that their integrations report. It does not automatically read private ChatGPT or Codex conversations or retrieve every provider’s billing history.

Information processed

Sign-in is provided by Clerk through BH Software Productions. Depending on the method chosen, Clerk processes account identifiers, email or phone information, verification information and authentication sessions. Tracewell uses a verified user identifier to associate a private workspace with its owner. Passwords and verification codes should be entered only in the authentication provider’s interface.

Tracewell stores workspace/project labels, provider/model labels, token counts, explicitly supplied costs or pricing rates, usage timestamps, automation schedules and reported run outcomes, alerts, client markup settings and reviewed charge estimates. Avoid personal information in labels. The ingestion API accepts documented metadata fields; prompts, completions, provider credentials and customer documents are not accepted payload fields.

Tracewell stores hashes of scoped integration keys and records needed to authorize or revoke OAuth connections. An integration key’s original secret is shown when issued; customers must store it securely. Connections expose only the authorized project scope. The application backend can process authorized workspace records.

When billing is activated, Stripe processes payment methods and billing details in its hosted interface. Tracewell stores customer/subscription/session identifiers, signed event processing records, plan status, allowance periods and discount redemption records. Tracewell does not collect card numbers in its own application form. Before launch, receipt configuration and applicable tax collection must be verified.

Purposes and service providers

Information is used to authenticate access, maintain workspaces, calculate reported usage and charge estimates, evaluate automation outcomes and alerts, enforce limits, administer subscriptions, prevent duplicate events and trial/discount abuse, and respond to support requests. Clerk provides identity services; Cloudflare provides hosting, delivery and operational database storage; Stripe provides hosted payments and subscription administration when enabled. These providers process information under their own terms and privacy notices. No advertising analytics are installed in the current application. Do not interpret that statement as a claim that hosting or identity providers keep no security logs or cookies.

The privacy guide uses fixed local answers. Questions remain in page memory and clear when the guide closes. Browser language and reduced-imagery preferences are stored locally. The setup guide’s optional microphone control may use a browser speech service, which can process audio under that provider’s policies. Customer live ElevenLabs speech generation is currently disabled; prerecorded ElevenLabs narration does not send a visitor’s chat text for synthesis. A future live-voice release requires an updated disclosure before activation.

Retention, export and deletion

Usage-event and run history is subject to the selected plan: Trial 14 days, Starter 30 days, Growth 90 days. The service’s scheduled retention task removes aged event/run history. Other operational records, security/authorization records and billing records have separate lifecycles; the history windows are not a promise to erase all account data or provider backups on those dates.

Settings provides CSV export and operational workspace deletion. Operational deletion is separate from deleting a Clerk sign-in identity or Stripe’s merchant records. Minimal trial dates/usage totals and redeemed launch-discount records are retained to prevent repeated trials or discounts. Backups, downloaded exports and third-party records require separate handling. Contact the support address to request account-related access, correction or deletion assistance; identity verification may be needed. Requests are reviewed through the support address under applicable requirements. This notice does not promise a fixed deletion deadline for third-party records or backups.

Security and transfers

The hosted service uses HTTPS. Cloudflare documents encryption at rest for D1 storage. Tracewell uses scoped key hashes, verified sessions and workspace ownership checks, payload validation, bound database parameters, rate limits, signed billing webhooks and restrictive browser headers. These measures do not provide end-to-end encryption, a security certification or a guarantee against every incident. Authorized backend processing and operational access remain possible. Service providers may process information in multiple countries under their applicable service arrangements. Tracewell does not promise US-only residency or a particular storage location. Provider information: Cloudflare, Clerk, and Stripe. Clerk distinguishes customer-data processing under its customer contracts from the information covered by its general privacy policy. No provider certification is represented as a certification of Tracewell.