Privacy Policy

This Privacy Policy explains how Trace collects, uses, stores, and protects information when you visit our website, create an account, use the dashboard, generate API keys, call the Trace API, configure webhooks, or contact us for support.

Trace provides package tracking infrastructure for developers and businesses. Customers may use Trace to submit tracking numbers and receive shipment status information. This policy applies to account users, website visitors, and technical users of the API.

Account information: when you create an account, we collect information such as your email address, company name, password hash, plan, and account settings.

API and usage information: when you use Trace, we process API keys, request paths, response status codes, request timing, IP addresses, usage counts, webhook configuration, and technical logs needed to operate and secure the service.

Tracking information: when you submit a tracking lookup, we process tracking numbers, carrier codes, delivery statuses, event timestamps, locations when available from carriers, and related shipment metadata returned by lookup sources.

Support and contact information: when you contact us, we collect the information you choose to provide, including your name, email address, company, message, and any troubleshooting details.

We use information to create and manage accounts, authenticate users, issue and validate API keys, provide package tracking results, operate webhooks, calculate usage, apply rate limits, prevent abuse, investigate errors, and improve reliability.

We may also use information to respond to support requests, communicate service updates, maintain security, enforce our Terms of Service, and comply with legal obligations.

We do not sell personal information. We do not use submitted tracking numbers to build advertising profiles.

Where applicable law requires a legal basis, we process information to perform our contract with you, to pursue legitimate interests such as securing and improving the service, to comply with legal obligations, and with consent where consent is required.

If you use Trace on behalf of a business, you are responsible for ensuring you have the rights and permissions needed to submit tracking numbers and related shipment information to the service.

We may share information with service providers that help us host, secure, monitor, and operate Trace. These providers may include cloud hosting, database, analytics, logging, payment, and communication services.

Payment details are processed by Trace's payment provider. Trace does not store full payment card numbers on its own servers.

We may disclose information if required by law, court order, government request, or to protect the rights, safety, and security of Trace, our users, or others.

We retain account information while your account is active or as needed to provide the service. API usage logs and technical logs may be retained for security, analytics, billing, debugging, and compliance purposes.

Tracking cache data may be retained temporarily to improve performance, reduce repeated lookup costs, and provide consistent responses. Retention periods may vary based on operational needs, security requirements, and plan features.

You may request deletion of your account or certain personal information by contacting us. We may retain limited records when required for legal, security, fraud prevention, accounting, or legitimate business purposes.

We use technical and organizational measures designed to protect information, including hashed passwords, API key hashing, access controls, transport encryption, and operational monitoring.

No online service can guarantee absolute security. You are responsible for protecting your account credentials and API keys. If you believe an API key or account has been compromised, revoke the key and contact us promptly.

Trace and its service providers may process information in countries other than where you are located. Where required, we use appropriate safeguards for international transfers of personal information.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have the right to withdraw consent where processing is based on consent.

To exercise privacy rights, contact us through the contact page. We may need to verify your identity before completing a request.

Trace may use cookies, local storage, and similar technologies to keep users signed in, store dashboard session information, remember preferences, and secure the service.

You can control cookies through your browser settings. Disabling cookies or local storage may prevent parts of the dashboard from working correctly.

We may update this Privacy Policy as Trace changes. If changes are material, we will take reasonable steps to notify users through the website, dashboard, or email.

For privacy questions, account deletion, or data requests, contact Trace through the contact page at /contact.