Privacy Policy
This Privacy Policy explains how Niaz Tech Solutions LLC d/b/a Traceway ("Traceway", "we", "us", "our") collects, uses, and shares personal information when you visit traceway.com, join the waitlist, request, book or attend a demo, or otherwise interact with us. Section 5 also names the companies that process data inside the Traceway product. Traceway™ is a product of Niaz Tech Solutions LLC.
We have not appointed an EU/UK representative at this time.
We do not intentionally collect special-category/sensitive data, and we ask that you not send it to us.
We rely on: consent (e.g., analytics cookies, marketing emails; you can withdraw anytime); legitimate interests (e.g., running and securing our site, responding to inquiries); and performance of a contract / steps before a contract (e.g., arranging a demo you requested).
We do not sell your personal information. We share it with service providers ("sub-processors") who process it on our behalf under contract:
| Provider | Purpose | Location | Status |
|---|---|---|---|
| HubSpot | CRM, website analytics, marketing email and meeting scheduling. From Ask Trace it receives your name and work email only if you tick consent and start a chat, and any question you choose to send our team (with the conversation, only if you tick that box); see HubSpot’s privacy policy and security page | United States | Active |
| Google Analytics | Website analytics: visitor traffic and sources. Once analytics is allowed it sets a per-browser identifier (the _ga cookie, kept about two years) so returning visits can be counted; we do not send it your name or email; see Google’s privacy policy and security page |
United States | Active |
| Vercel | Hosts and delivers the website; see Vercel’s privacy policy and security page | United States | Active |
| Cloudflare | Turnstile, the bot and spam check that runs when you submit a form; see Cloudflare’s privacy policy and security page | United States | Active |
| Anthropic | The AI behind the Ask Trace assistant on the website. Chat messages are sent to generate replies and are not used to train models; see Anthropic’s privacy policy and security page | US company; requests may be processed outside the US | Active |
| Zoom | Video calls for demos; see Zoom’s privacy policy and security page | United States | Active |
| Fathom | AI recording, transcription and notes for demo calls; see Fathom’s privacy policy and security page | United States | Active |
| Google Workspace | Business email and calendar; see Google’s privacy policy and security page | United States | Active |
When your organisation uses the Traceway product, its workspace data is processed by the sub-processors below. Each one is marked as active (in use today) or built in, not switched on (the code is there, but it is turned off and receives nothing). A company not on this list is added here, and on our Security & data page with its date, before it receives any workspace data. We do not yet email workspace administrators when the list changes; this list is the notice. Inside the product, Settings → Data placement lists these same companies, in the same order and with the same status, with exactly what each one receives; it also lists two tools built into the product that are switched off and receive nothing. Tools your organisation connects itself (such as Slack, Jira or Confluence) are not our sub-processors: they are your own vendors, and data moves to them because you chose to connect them.
| Provider | Purpose | Location | Status |
|---|---|---|---|
| Supabase | The database and file storage behind every record, member, audit event and uploaded file, with its own daily backups, kept 7 days; see Supabase’s privacy policy and security page | United States (us-east-2), or the European Union (eu-central-1) for a workspace set up there | Active |
| Google Cloud | A second, encrypted off-site copy of the database, taken nightly and kept 30 days, so it can be restored after a disaster. Uploaded files are not in it yet; see Google Cloud’s privacy policy, security page and data processing addendum | United States (us-east1) | Active |
| Clerk | Sign-in, sessions, organisation membership and invitations, and single sign-on to your own identity provider where you enable it; see Clerk’s privacy policy and security page | United States | Active |
| Vercel | Runs the application, and measures page views and page performance; see Vercel’s privacy policy and security page | United States | Active |
| Anthropic | Powers Trace: drafting, extraction, search and answers. May not train models on your content; see Anthropic’s privacy policy and security page | US company; requests may be processed outside the US | Active |
We may also disclose information if required by law, to protect our rights, or in connection with a business transfer (e.g., financing, merger, or acquisition).
We use cookies and similar technologies as described in our Cookie Policy. Your choices are region-aware: where required (e.g., the EU/EEA, UK, Switzerland, Brazil, Quebec) non-essential cookies load only after you opt in; elsewhere (e.g., the US and the rest of Canada) analytics may load by default with a clear notice and an easy opt-out. You can change your choice anytime via the "Cookie settings" link in our footer.
Depending on where you live, you may have the right to access, correct, delete, port, or restrict/object to the processing of your personal information, and to withdraw consent.
To exercise any right, email privacy@traceway.com. We will respond within the timeframe required by applicable law. Inside the Traceway product, a workspace admin can also export the workspace, erase a person, and delete the workspace themselves, without asking us.
We are based in the United States, and so are our providers. A workspace can be set up in the European Union; its records, its files and the database provider’s backups are then held in the EU (eu-central-1). Even then, each person’s profile (name, email address, job title, out-of-office note, planned leaving date and settings), sign-in itself, the running application, Trace’s AI and what is sent to our support are in the United States, so some information is still transferred to and processed there. Anthropic, which runs our AI, is a US company, but we cannot promise that every request is processed only in the United States. For transfers from the EU/EEA or UK, we rely on appropriate safeguards such as the Standard Contractual Clauses.
We keep personal information only as long as needed for the purposes above or as required by law:
For the Traceway product:
We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
For the Traceway product, our Security & data page sets out where workspace data is held, which of the companies above can reach it and what each one receives, and what our audit trail does and does not prove. It lists the same sub-processors, in the same order, with the same status as this page.
Traceway is a business product not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
We may update this policy from time to time. We will post the new version here and update the "Last updated" date; we will highlight material changes.
Niaz Tech Solutions LLC d/b/a Traceway
7014 13th Avenue, Suite 202, Brooklyn, NY 11228, USA
privacy@traceway.com