Privacy Policy

1. Introduction

Tracely360 ("we", "us", "our") operates an enterprise code intelligence platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

Account information

When your organization subscribes to Tracely360, we collect business contact details including name, email address, job title, and organization name provided by your administrator.

Repository data

Tracely360 processes source code repositories that your organization explicitly configures for scanning. Repository data is processed to extract structural metadata (services, endpoints, dependencies, imports) and is stored as a graph. We do not retain raw source code after extraction completes.

Usage data

We collect aggregated platform usage metrics including scan frequency, graph query patterns, and feature adoption to improve the product. Usage data does not include source code content.

3. How We Use Your Information

• Provide, operate, and maintain the Tracely360 platform
• Process repository scans and build evidence-backed graphs
• Authenticate users and enforce access controls
• Send service-related communications and security notices
• Improve platform performance, reliability, and features
• Comply with legal obligations

4. Data Retention

Graph data is retained for the duration of your subscription plus 30 days. Upon subscription termination, all repository-derived data is permanently deleted within 30 days. Account records are retained for 12 months after termination for audit and compliance purposes.

5. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, audit logging, and regular security assessments.

6. Data Sharing

We do not sell your data. We share information only with infrastructure providers necessary to operate the platform (under data processing agreements), and when required by law. Repository data and graph content are never shared with third parties for marketing or advertising purposes.

7. Self-Hosted Deployments

For self-hosted enterprise deployments, all data remains within your infrastructure. No repository data, graph content, or usage telemetry is transmitted to Tracely360 unless explicitly configured by your organization.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. Organization administrators can manage user data through the platform. For data subject requests, contact privacy@tracely360.com.

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email to account administrators at least 30 days before taking effect.

10. Contact

For questions about this Privacy Policy, contact us at privacy@tracely360.com.