Privacy Policy

At InfraTrace, we take your privacy seriously. This policy describes how we collect, use, and protect your personal information.

Last updated: November 20, 2024

1. Introduction

InfraTrace ("we", "our", or "us") is committed to protecting your privacy. This privacy policy explains how we collect, use, share, and protect your personal information when you use our infrastructure management platform.

Important: By using InfraTrace, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

  • Email address and username for authentication
  • Password (encrypted and never stored in plain text)
  • Profile information (optional: company name, role)

2.2 Infrastructure Data You Create

  • Projects: Names, descriptions, statuses, and metadata
  • Devices: Equipment information, IP addresses, configurations
  • Networks: Topology, VLAN configurations, documentation
  • Tasks: Task descriptions, assignments, comments
  • Equipment Versions: Photos, configurations, port mappings, commit history
  • Teams: Team names, member roles, collaboration data

2.3 Payment Information

  • Payment details are processed securely by Stripe
  • We do not store full credit card numbers on our servers
  • Subscription status and billing history

2.4 Automatically Collected Information

  • Usage Data: Features used, pages visited, time spent
  • Device Information: IP address, browser type, operating system
  • Log Data: Error logs, API calls, performance metrics

3. How We Use Your Information

Service Delivery

Provide infrastructure management, versioning, and collaboration features

Account Management

Manage your account, authentication, and subscription

Communication

Send important updates, security alerts, and support responses

Security

Detect and prevent fraud, abuse, and security incidents

Product Improvement

Analyze usage patterns to improve features and user experience

Legal Compliance

Comply with legal obligations and enforce our terms of service

4. Data Sharing

We do not sell your personal data. We only share your information in the following limited circumstances:

Service Providers

We work with trusted third-party service providers:

  • Stripe: Payment processing (PCI-DSS compliant)
  • Cloudflare R2: Secure file storage for equipment photos and configurations
  • Hetzner: Server hosting infrastructure

Team Members

When you invite team members, they can access shared projects, devices, networks, and tasks within your team.

Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request.

Business Transfers

In case of merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you beforehand.

5. Data Security

We implement industry-standard security measures to protect your data:

Encryption

TLS/SSL for data in transit, bcrypt for passwords

Access Controls

Session-based authentication, role-based permissions

Secure Infrastructure

Hosted with automated backups

Monitoring

Security logging and anomaly detection

Note: While we implement robust security measures, no system is 100% secure. Please use strong, unique passwords.

6. Your Privacy Rights

You have the following rights regarding your personal data:

1

Right to Access

Request a copy of your data through your account settings

2

Right to Correction

Update your profile and project data at any time

3

Right to Deletion

Delete your account and all associated data via Settings > Account > Delete Account

4

Right to Data Portability

Export your projects, devices, and configurations in JSON format

How to Exercise Your Rights

Most rights can be exercised directly through your account settings. For additional requests, contact us at [email protected]

We will respond within 30 days of receiving your request.

7. Cookies

We use cookies to provide and improve our services:

Cookie Type Purpose Duration
Essential Authentication, session management, security Session
Preferences Remember your settings (theme, language) 1 year

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services:

  • Active accounts: Data retained indefinitely while your account is active
  • Deleted accounts: Permanently deleted within 30 days (except for legal obligations)
  • Backups: Removed from backups within 90 days

9. Children's Privacy

InfraTrace is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at [email protected].

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

  • Email notification to your registered address
  • Prominent notice on our website
  • In-app notification

Your continued use of InfraTrace after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, concerns, or requests, please contact us:

Response Time

We typically respond within 1-2 business days