Information collected
TraceGraphs may collect account information such as name, email, authentication-provider identifiers, verification status, profile image, and password hashes maintained by the authentication system. It also processes workspace names and memberships, searches, submitted URLs, discovery-agent instructions, API-key metadata, usage counters, support communications, subscription status, Stripe customer and transaction identifiers, legal acceptances, administrative actions, IP addresses, device/browser information, logs, and security events.
Information not stored
TraceGraphs does not receive or store complete payment-card numbers. Stripe processes payment credentials. API-key secrets are shown once and stored as cryptographic hashes. Passwords are handled through the authentication system and are not available to administrators in readable form.
How information is used
- provide accounts, workspaces, article processing, discovery, knowledge graph analysis, APIs, billing, and support;
- authenticate users, enforce plans and quotas, prevent abuse, and secure systems;
- send verification, password-reset, billing, security, and service communications;
- debug, monitor, back up, measure, and improve the service;
- comply with law and enforce agreements; and
- create aggregated or de-identified operational statistics.
Service providers and disclosures
Information may be processed by providers supporting the service, including Stripe for billing, Resend for transactional email, Google when Google sign-in is used, OpenAI for configured automated processing, Vercel Analytics for site measurement, hosting/network providers, database and object-storage infrastructure, and search/content retrieval providers. Providers process information under their own terms and applicable agreements. Information may also be disclosed to comply with law, protect rights and safety, investigate abuse, complete a business transaction, or with your direction.
AI processing
Article text, selected prompts, discovery instructions, and related operational context may be sent to configured AI providers to perform extraction or discovery tasks. Do not submit confidential, personal, regulated, or proprietary information that you are not authorized to process. TraceGraphs is designed for public-source research, not storage of sensitive personal records.
Cookies, analytics, and advertising measurement
TraceGraphs uses authentication and security cookies necessary to keep users signed in and protect sessions. With your permission, TraceGraphs also uses Vercel Analytics to understand site usage and the Google tag to measure advertising performance. Optional analytics and advertising storage is denied unless you accept it through the cookie banner. You may change your choice through the Cookie settings link in the site footer or, when signed in, from the Account page. Rejecting optional cookies does not disable essential account or security functions.
Retention
Account and workspace information is retained while the account is active and for a reasonable period afterward. Billing objects, legal acceptances, security records, webhook events, and administrative audits may be retained longer for accounting, fraud prevention, dispute resolution, and legal compliance. Backups expire according to operational retention schedules. Source-derived canonical intelligence may remain after a workspace is deleted because it is shared and not necessarily personal information.
Security
TraceGraphs uses access controls, server-side authorization, hashed credentials, network separation, encrypted transport where configured, backups, and audit records. No system is completely secure, and TraceGraphs cannot guarantee that unauthorized access or loss will never occur.
Your choices and rights
You may update account details, revoke API keys, cancel a subscription, or request account deletion through available controls or support. Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to appeal a denied request. Identity verification may be required. Some information may be retained where legally permitted or required.
International processing and children
Information may be processed in the United States and other locations where providers operate. TraceGraphs is not directed to children under 18 and does not knowingly permit them to create accounts.
Changes
This policy may be updated as the service and legal requirements change. Material changes will be communicated or presented for renewed acceptance when appropriate.
Contact
Questions about these terms or policies can be sent to [email protected].
See also the Terms of Use, Privacy Policy, and Research and Financial Disclaimer.