Privacy Policy

1. Information we collect

AccessTrace AI may collect account information such as name, email address, login information, subscription status, billing identifiers, usage counts, support requests, saved cases, parsed findings, generated reports, and optional raw artifacts if you choose to store them.

2. Evidence and analysis data

Users explicitly upload or paste evidence for analysis. Evidence may include SSO, identity, authentication, access, browser, metadata, certificate, Windows/AD, LDAP, Kerberos, claims, group, role, policy, or related troubleshooting material. You should redact secrets and unnecessary personal data before upload.

3. How we use information

We use information to create and secure accounts, provide analysis, save reports, enforce usage limits, process subscriptions, support users, troubleshoot issues, improve service quality, and protect against misuse.

4. Payment processing

Payments and subscription management are handled through Stripe. AccessTrace AI stores Stripe customer, subscription, status, price, and period-end identifiers needed to manage access and billing. AccessTrace AI does not store full payment card numbers.

5. Email and transactional messages

AccessTrace AI may send account, verification, billing, security, support, and service messages. Transactional email may be handled by third-party email providers.

6. Service providers

AccessTrace AI may use service providers for hosting, database storage, authentication, email, payment processing, analytics, AI processing, and operational support. These providers process information as needed to provide the service.

7. Security

AccessTrace AI is designed around explicit upload, redaction reminders, optional raw artifact storage, account authentication, usage limits, and report-based workflows. No online service can guarantee absolute security. See the Security page for additional guidance.

8. Data retention

AccessTrace AI may retain account data, subscription records, usage records, case metadata, parsed findings, generated reports, and optional raw artifacts while your account is active or as needed for legal, billing, security, and operational purposes. Future versions may provide more self-service deletion controls.

9. User choices

You can choose what evidence to upload, whether to retain raw artifacts when the option is available, whether to cancel a paid subscription, and whether to contact support about account or data questions.

10. Children

AccessTrace AI is intended for professional and technical use and is not intended for children.

11. Contact

Privacy questions may be sent to support@accesstrace.app. Security-sensitive concerns may be sent to security@accesstrace.app.