How we handle personal data.

1. Who we are

Tracee SAS, a French société par actions simplifiée registered in Paris.

• Registered office: 33 rue Lafayette, 75009 Paris, France
• SIREN: [SIREN NUMBER]
• RCS: Paris [RCS NUMBER]
• VAT: FR[VAT NUMBER]
• Data Protection contact: hello@traceeapp.com

2. What we collect and why

We collect personal data in the following situations:

• When you contact us (contact form, discovery-call request, email): name, organization, role, email, and the content of your message. Legal basis: your consent and our legitimate interest in responding to inbound business inquiries.
• When you request a report: name, organization, role, email, and a short note on what you are working on. Legal basis: your consent.
• Server logs (automatic): IP address, browser user agent, requested URL, timestamp, response code. Legal basis: our legitimate interest in operating a secure website.
• Analytics: if analytics is enabled on the site, it is a cookie-free, privacy-respecting service (e.g., Cloudflare Web Analytics, Plausible). No personal identifiers are collected and no cross-site tracking occurs. Legal basis: our legitimate interest in understanding how the site is used.

3. What we do not do

• We do not sell personal data.
• We do not share personal data with advertisers.
• We do not use third-party advertising trackers, retargeting pixels, or social-media tracking SDKs.
• We do not place cookies that require consent banners. The site uses only strictly necessary technical cookies (if any).

4. Who has access

Personal data submitted via contact and report-request forms is stored in our email system and used solely to respond to your inquiry and serve the engagement. We do not transfer this data to third parties except where strictly required to deliver our service (for example, a hosted email provider acting as data processor under DPA, or to comply with a legal obligation).

5. International transfers

Our website is hosted on infrastructure that may process data outside the European Economic Area, including in the United States. Where this is the case, the processors used (Cloudflare, Google Fonts) operate under Standard Contractual Clauses approved by the European Commission and provide adequate protection within the meaning of GDPR Article 46.

6. Retention

We keep personal data only for as long as needed:

• Inquiry data: 24 months from last contact, unless you become a client (in which case standard commercial retention applies, up to 10 years for billing records under French law).
• Server logs: 30 days, then anonymized or deleted.
• Newsletter / report-list subscribers: until you unsubscribe.

7. Your rights under GDPR

You have the right to access, rectify, delete, restrict, or port your personal data, and to object to processing. You also have the right to lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

To exercise any right, write to hello@traceeapp.com. We respond within one month.

8. Updates to this policy

We update this page when the way we handle personal data changes. The last-updated date at the top reflects the most recent revision.