Privacy Policy

1. Introduction

Foundry01 Ltd ("we," "our," or "us") operates Trace, a desktop application and web service for creating step-by-step documentation. This Privacy Policy describes how we collect, use, and share your personal information when you use our services.

2. Information We Collect

Account Information

When you create an account, we collect your email address, name, and authentication credentials. We use Supabase Auth for secure authentication management.

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or complete payment details. We retain subscription status and billing history for account management.

Tutorial Content

For users of the paid desktop app, all tutorial content (recordings, screenshots, text) is stored locally on your device. We do not have access to this content. For subscription users who opt into cloud sync, content is encrypted end-to-end before being transmitted or stored.

Usage Data

We collect basic usage analytics such as page views and feature adoption metrics to improve our service. We do not use third-party tracking or advertising cookies.

3. How We Use Your Information

• To provide and maintain the Trace service
• To process payments and manage your subscription
• To send important service updates and security notifications
• To respond to your support requests
• To improve and optimize our service
• To detect, prevent, and address technical issues

4. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• Supabase — for authentication and database hosting
• Resend — for transactional email delivery
• Law enforcement — only when required by law

5. Data Security

We implement industry-standard security measures including end-to-end encryption for synced content, secure authentication via Supabase Auth, encrypted connections (TLS/HTTPS), and regular security audits. For subscription users, we employ a zero-knowledge architecture — your encryption keys are derived from your passphrase, which we never store or have access to.

6. Data Retention

We retain your account information for as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., billing records).

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict processing of your data
• Withdraw consent where processing is based on consent

8. Children's Privacy

Trace is not intended for use by children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: tylerbody@foundry01.com

Company: Foundry01 Ltd