Privacy Policy

FraudTrace is operated by Tracelytics AI Technologies Private Limited, Bengaluru, India. We process personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act), under which we are a Data Fiduciary and you are a Data Principal.

What We Collect

• •Analytics data — with your consent, Google Analytics collects pseudonymised usage data such as pages visited, time on site, device type and approximate location.
• •Form submissions — when you request early access or contact us, we collect your name, work email, phone number, organisation, and the source or CTA through which you submitted the form (e.g. which page or button you used). This data is stored securely in our Supabase database.

We do not knowingly collect data from anyone under 18, and we do not run behavioural tracking or targeted advertising at children.

Why We Use It

To respond to your enquiry, process early-access requests, send you product updates, improve our website, and meet legal or record-keeping obligations. We do not sell your data.

Legal Basis

We process personal data on the basis of your consent — given by accepting our cookie banner or submitting a form — and, where applicable, the legitimate uses permitted under Section 7 of the DPDP Act.

Email Communications

When you submit a contact or early-access form, we send:

• •A confirmation email to you, acknowledging receipt of your submission and outlining next steps.
• •An internal notification email to our team, so we can follow up with you promptly.

Both emails are delivered via Resend (Resend Inc., USA). By submitting the form, you consent to receiving the confirmation email.

Cookies

• •Essential cookies — needed for the site to work. Cannot be disabled.
• •Analytics cookies — set only after you consent, and removed if you withdraw it.

A cookie we previously used is no longer active. Any data collected through it has been deleted, and any copy left on your device will expire on its own.

Who We Share With

We share data only with the processors listed below. They act under contract and process data only on our instructions.

• •Google Analytics — website usage analytics.
• •Supabase (Supabase Inc., USA) — stores all form submissions and admin authentication in a PostgreSQL database.
• •Resend (Resend Inc., USA) — delivers confirmation emails to leads and notification emails to our team.
• •Our cloud hosting provider — for website infrastructure.

Cross-border data transfers: Supabase and Resend store and process data outside India (in the USA). Such transfers are made in compliance with Section 16 of the DPDP Act. We may also disclose data where required by law.

How Long We Keep It

Only as long as needed for the purpose it was collected for, or as required by law. When you withdraw consent or the purpose is served, we erase the data and instruct our processors to do the same.

Your Rights

You can ask us to:

• •Give you a summary of your personal data and how it is processed, including who it has been shared with
• •Correct, complete, update or erase your data
• •Withdraw your consent at any time
• •Register a grievance about how we handle your data
• •Nominate someone to exercise these rights on your behalf if you die or become incapacitated

Visitors from the EEA/UK also retain their GDPR rights, including data portability and the right to complain to a local supervisory authority.

Security and Breaches

We use reasonable safeguards including access controls, encryption in transit, and monitoring. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required under the DPDP Act.

Contact / Grievance Officer

We will acknowledge and respond within the timelines prescribed by law. If unresolved, you may escalate to the Data Protection Board of India.

Changes

We may update this policy. Changes will be posted here with a new "Last updated" date, and we will seek fresh consent where a change materially affects how we process your data.