LEGALPRIVACY POLICY

Privacy Policy

What we collect, why we hold it, who processes it on our behalf, and the rights you hold over it. Last updated 11 August 2026.

01

Who is responsible for your data

Artur Ziganshin, trading as Traceremove is the controller for personal data processed through traceremove.dev and the Laboratory workspace.

We are established in Slovenia, European Union, with a presence in the United States.

You can reach us about anything in this policy at support@traceremove.com. Registered address available on request and printed on every invoice.

02

What we collect

Account data: your email address, the role assigned to your account, the time you signed in, and your subscription status.

Workspace content: the projects you create, the documents and evidence you upload, the notes you write, and the assessments and reports generated from them. This can contain personal data if you choose to upload it.

Technical data: request logs, IP address, browser type and error traces produced by our hosting and database providers, kept for security and debugging.

Billing data: your name, billing country, tax identifiers and payment history. This is collected and held by our merchant of record, not by us. We see the invoice record and subscription status, never your full card number.

We do not buy personal data from third parties and we do not run advertising trackers.

03

Why we process it and on what basis

To provide the service you asked for, including running assessments and storing your evidence. Legal basis: performance of a contract.

To keep the platform secure, prevent abuse and debug failures. Legal basis: our legitimate interest in a functioning and safe service.

To take payment and meet tax and accounting obligations. Legal basis: contract and legal obligation.

To send you service messages such as sign-in links, billing notices and material changes to these policies. Legal basis: contract.

To send occasional research updates, only if you asked for them. Legal basis: consent, withdrawable at any time.

04

How generated assessments work

When you run an assessment, the relevant extracts from your project and documents are sent to our model provider so that the analysis can be produced, then the result is stored in your workspace.

Content sent through the provider commercial interface is not used to train its models.

If you do not want a document analysed by a model, do not attach it to an assessment. You can keep it in the evidence register without running analysis on it.

Do not upload special category data, medical records or material under specific legal protection unless you have a lawful basis and have told us in advance.

05

International transfers

Your database, authentication records and uploaded files are stored in the European Union.

Hosting, model inference and payment processing involve transfers outside the European Economic Area. Those transfers rely on the European Commission standard contractual clauses, and where applicable on the EU-US Data Privacy Framework.

06

How long we keep data

Workspace content is kept until you delete it or until 30 days after your account is closed.

Account records are kept while your account is active and for 12 months afterwards, so that we can answer questions about past work.

Invoices and tax records are kept for the period required by tax law, which is normally between six and ten years depending on jurisdiction.

Technical logs are kept for a short retention window, normally no more than 90 days.

07

How we protect data

Every workspace table is protected by row level security, so one account cannot read another account records.

Uploaded files sit in a private storage bucket that is not publicly addressable and is reachable only through short-lived signed links.

Data is encrypted in transit and at rest. Administrative credentials are held only on the server side and never sent to the browser.

No system is perfect. If a breach affects your rights we will tell you and the competent supervisory authority without undue delay.

08

Your rights

You can ask for a copy of your personal data, ask us to correct it, ask us to delete it, ask us to restrict processing, object to processing based on legitimate interests, and ask for your data in a portable format.

Where processing rests on consent you can withdraw that consent at any time.

Write to support@traceremove.com and we will answer within one month. There is no charge for a reasonable request.

If you are unhappy with our answer you can complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblascenec), which is our lead supervisory authority, or to the data protection authority of the country where you live.

09

Cookies

We set only the cookies needed to keep you signed in and to protect the sign-in flow. They are strictly necessary and cannot be turned off without breaking authentication.

We do not run advertising or cross-site tracking cookies, and we do not sell or share personal data for behavioural advertising.

If we later add product analytics we will name the provider here and ask for consent where the law requires it.

10

If you are in the United States

We operate in the United States as well as the European Union, and we hold everyone to the same standard: we do not sell personal data, we do not share it for cross-context behavioural advertising, and we never use workspace content for advertising of any kind.

If you live in California, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law, you can ask what we hold about you, request a copy, ask us to correct or delete it, and appeal if we refuse. Write to support@traceremove.com.

We do not discriminate against anyone who exercises these rights. Your price and your features stay exactly the same.

11

Children

The service is intended for professional use by people aged 18 or over. We do not knowingly collect data from children.

12

Changes to this policy

We may update this policy. Material changes are announced by email to account holders and by an updated date on this page.

Processors

Who processes data on our behalf

Supabase

Database, authentication, sign-in links and encrypted file storage for the private workspace

Project hosted in Ireland, European Union

Netlify

Website hosting, server-side rendering and content delivery

United States, with edge delivery worldwide

OpenAI

Model inference for generated assessments, findings and summaries

United States

Paddle.com Market Ltd

Payment processing, invoicing, tax collection and subscription management as merchant of record

United Kingdom and European Union

Related

Other policies

Terms of Service · Refund Policy · Contact