Legal

Privacy Policy

Last updated: June 12, 2026

This Privacy Policy explains how TraceFlow ("we", "our", "us") collects, uses, and protects information when you use our VSCode extension, website, and related services (collectively, the "Service"). By using TraceFlow, you agree to the practices described below.

1. Information We Collect

Account Information

When you create an account, we collect your email address and, if you choose email/password login, a securely hashed version of your password (we never store plain-text passwords). If you sign in with GitHub, we receive your GitHub user ID, email address, and an access token used to verify your identity.

Crash & Debug Data

When TraceFlow analyzes a crash in your Python code, it sends the following information from your machine to our servers:

  • The exception type and error message
  • The relevant function or module source code where the crash occurred
  • Variable names, types, and values present at the time of the crash
  • A snapshot of the call stack and variable history leading up to the crash
  • File names and line numbers within your project

Important: if your code stores sensitive values in variables (for example, API keys, passwords, tokens, or personal data) and a crash occurs while those variables are in scope, those values may be included in the data sent for analysis. We recommend avoiding running TraceFlow on files containing hardcoded secrets, or removing sensitive values before debugging.

Usage Data

We log the number of analyses you run, the timestamp of each request, and the exception type involved, in order to enforce plan limits (e.g. 5 analyses/day on the Free plan) and to monitor service health.

Payment Information

Subscription payments are processed by LemonSqueezy. We do not collect or store your card details. We receive your email address and subscription status from LemonSqueezy to manage your plan.

2. How We Use Your Information

  • To generate AI-powered crash analyses and suggested fixes
  • To authenticate your account and maintain your session
  • To enforce usage limits based on your subscription plan
  • To send transactional emails (verification, password resets)
  • To process subscription payments and manage billing
  • To cache previously analyzed crashes and reduce redundant processing
  • To maintain and improve the reliability of the Service

3. Third-Party Services

We rely on the following third-party providers to operate TraceFlow:

  • OpenAI— crash data (code, variables, stack traces) is sent to OpenAI's API to generate the root cause analysis and suggested fix.
  • GitHub — used for optional OAuth sign-in.
  • LemonSqueezy — handles subscription payments and billing.
  • Resend — used to send account verification and password reset emails.

Each of these providers processes data according to their own privacy policies and terms.

4. Data Storage & Security

Account data, subscription information, and usage logs are stored in our database on a private server. Crash analyses may be temporarily cached to avoid repeat processing of identical crashes. Your VSCode extension stores an API key locally using VSCode's built-in secure storage, and the website stores a session token in your browser's local storage for the duration of your login session.

We take reasonable technical measures to protect your data, including password hashing and HTTPS encryption for all network requests. However, no system can be guaranteed 100% secure.

5. Data Retention

We retain account information for as long as your account remains active. Usage logs are retained to support plan enforcement and billing history. Cached crash analyses may be retained to improve performance for repeated queries. You may request deletion of your account and associated data at any time (see Section 7).

6. Cookies & Local Storage

Our website uses browser local storage to keep you signed in (storing a session token). We do not use third-party advertising cookies or tracking pixels.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at the email below. If you delete your account, your account information, API keys, and subscription records will be removed from our active systems, subject to any retention required for legal or billing purposes.

8. Children's Privacy

TraceFlow is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at usama@pasly.co.