Privacy policy
Draft for legal review. Not in force. Last updated: [date of publication]
This policy explains what [Company] ("Trailcam", "we") collects about the people who use Trailcam, why, how long we keep it, and the choices you have. What your team puts in Trailcam (builds, flows, recordings) is your workspace's content: we process it on your organization's behalf under our data processing agreement, and your organization's own policy covers the people in it.
What we collect, and why
| What | Why | Kept |
|---|---|---|
| Your account: name, email address, profile picture (if you sign in with Google or GitHub), how you sign in (email code, Google, GitHub, passkey) | To sign you in, show who did what in your workspace, and email you | Until you delete your account |
| Sessions: when you signed in, your browser and device, IP address | Security: you can see and sign out your devices; we spot abuse | Until the session ends (at most 30 days) |
| Your workspaces: which ones you're in, your role, invitations you sent | To give you access and let Owners manage it | While you're in the workspace |
| What you do: changes you make (in the workspace's audit log), runs you start | So your team can see who changed what; support | As long as the workspace |
| Billing: your plan, the billing email and address, tax IDs; Stripe keeps card details (we never see them) | To charge for plans and send invoices | As long as the law requires for financial records [7 years] |
| Messages to us: emails to support | To help you | [2 years] |
| Technical logs: requests to the app (time, address, page, result), for troubleshooting | Keeping Trailcam running and secure | [Log retention] |
We don't use analytics or advertising cookies or scripts, and we don't track you across other sites.
Cookies. Trailcam sets only what it needs: a session cookie that keeps you signed in, and one that remembers how you last signed in. Cloudflare Turnstile checks that sign-in requests come from people, not bots (see Cloudflare's privacy policy).
Trailcam AI
When it's on for your workspace (it is by default; Owners can turn it off), Trailcam AI reads the screen structure, step and error where a run failed, the last screenshot of a passing run, and your flows, to explain failures, suggest fixes, write flows from descriptions and check screens; and, when you use Describe it or Find my journeys, the text of your app's screens as it does a journey or looks round a build. Describe it and Find my journeys run on Anthropic's Claude through Cloudflare's AI Gateway, and the rest on Cloudflare Workers AI. No model is trained on your data. What it produces (a diagnosis, a suggested fix) is kept with its run, and goes when the run does.
Emails
We email you what you need: sign-in codes, invitations, alerts your workspace sends you, billing notices, and changes to these policies. A few getting-started emails in your first month, and each workspace's weekly summary, can be turned off (account settings, and the workspace's Alerts settings, or the link in the email).
Who we share it with
Only the services that run Trailcam for us, listed with what they do on our sub-processors page: for example Cloudflare (hosting, files, email, AI), PlanetScale (our database) and Stripe (payments). Each is bound to use it only to provide its service to us. We don't sell or rent personal information, or share it for advertising.
We may disclose information if the law requires it, to protect people's safety or Trailcam's security, or as part of a sale or merger of our business (with notice to you).
Where it's kept
In the United States: Cloudflare's network serves the app, with our database and device hosts in the US.
Your choices and rights
- See and download what we hold about you: account settings, Your data.
- Correct your name or email: account settings.
- Delete your account: account settings. It deletes your account and the workspaces only you are in. In workspaces with others, their audit log still records what was done; it shows "someone no longer at Trailcam" in place of your name, but keeps your email address where it was part of a change (an invitation sent to you, say).
- Object or ask about anything here: [privacy contact].
Depending on where you live (for example California, or the EU and UK), you may have further rights, such as to know what we've collected, to restrict or object to processing, and to complain to a regulator. We'll answer requests within 30 days [45 days under the CCPA], and won't treat you differently for making one.
California: we don't sell or share personal information as the CCPA defines those, and don't use sensitive personal information beyond what's needed to provide Trailcam.
EU and UK: we rely on our contract with you (to provide Trailcam), our legitimate interests (security, improving Trailcam, support), and legal obligations (billing records). Transfers to the US are covered by [the EU–US Data Privacy Framework / standard contractual clauses].
Security
Every connection is encrypted; secrets that reach other services (alert channels' addresses and keys) are sealed at rest; each workspace's data is kept apart from every other's in our database; each run happens on its own throwaway device; and access to production is limited to the people who run Trailcam, with every staff action logged. No system is perfectly secure: if a breach affects your information, we'll tell you without undue delay.
Children
Trailcam isn't for anyone under 16, and we don't knowingly collect their information.
Changes
We'll post changes here and email you before any that matter take effect.
Contact: [Company], [address], [privacy contact].