Privacy policy

Who processes your data

The controller is Greencode Software SRL, incorporated in Argentina, which builds and operates Tracy.

What data we collect

We only process the data the platform needs to work. Depending on how you use it, that can be:

• Your account data: your email address and your name. We get them when you sign in with a one-time code, when you create a password, or from your identity provider if you sign in with Google or Microsoft.
• What your identity provider gives us: your email, your name, whether that provider verified the email and, for Microsoft, your organization's identifier. We never receive your password.
• Platform usage: which sections you visit and which actions you take, so we can understand how the product is used and spot errors.
• Conversations with the agents: the messages you exchange with the AI agents and the results they produce.
• Contact form: the details you fill in voluntarily so we can answer you.
• Technical data: IP address, browser type and the access logs the infrastructure produces.

Cookies and browser storage

We use as few as possible, and none of them for our own advertising:

• tracy_locale: remembers the language you chose so you do not have to pick it again. It lasts a year and is strictly functional.
• tracy_federated_nonce: protects the Google or Microsoft sign-in against the reuse of someone else's token. It lasts ten minutes, your browser cannot read it, and it is cleared as soon as the login ends.
• Session: once you sign in we keep your session token, so you are not asked for your credentials on every page.
• Cloudflare Turnstile: checks that whoever submits a form is a person. It is provided by Cloudflare and uses its own storage.
• Analytics: when enabled, we measure usage in aggregate with Google Analytics or Google Tag Manager. We also keep in your browser which campaign brought you here.

What we use the data for

We process your data to:

• Give you access to the platform and keep your session open.
• Run the agents service and keep track of the credits consumed.
• Answer your enquiries.
• Improve the product, fix errors and keep the service secure.
• Meet the legal obligations that apply to us.

Who we share it with

We do not sell or rent personal data. We share it only with the providers that serve us, and only as far as they need it to work:

• Amazon Web Services: platform hosting.
• Google and Microsoft: only if you choose to sign in with one of those accounts.
• Cloudflare: anti-bot verification on the forms.
• Sentry: application error reporting.
• Artificial intelligence model providers: they process the conversations with the agents in order to produce the answers.

International transfers

Some of these providers operate outside your country, so your data may be processed in other jurisdictions. We require adequate protection safeguards from each of them.

We may also share data when a competent authority lawfully requires us to.

How long we keep it

Your account data, for as long as the account exists. If you close it, we delete or anonymise the data, except what we must keep to meet a legal or accounting obligation.

Technical and error logs are kept for limited periods and then discarded.

Your rights

You can ask us to access your personal data, correct it, update it or delete it, and to object to certain processing. Write to us and we will answer.

In Argentina, the Agencia de Acceso a la Información Pública is the supervisory authority for Law 25.326 on the Protection of Personal Data and handles complaints from anyone who believes their rights have been breached. If you live in the European Economic Area or the United Kingdom, you can also exercise the rights the General Data Protection Regulation grants you.

Security

Traffic is encrypted, passwords are stored hashed, and access to data is limited to the people who need it to operate the service. No system is infallible, but we work continuously to reduce that risk.

Minors

Tracy is a platform for professional use and is not directed at people under eighteen. We do not knowingly collect data from minors.

Changes to this policy

If we change it, we update the date in the header. When the change is significant, we announce it on the site or by email.

Contact

If you have questions about this document, or want to exercise your rights over your data, write to us:

sebastian.alonso@greencodesoftware.com