Privacy Policy

1. Who we are

Traced ("we", "us", "our") is a hiring platform operated out of Canada. If you have questions about this policy or your personal information, contact us at legal@traced.ca.

2. Information we collect

We collect information you provide directly and information generated when you use Traced.

Account information

When you create an account we collect your first name, last name, username, and email address. You may optionally add a profile photo, title, bio, location, website, GitHub link, work experience, education, and skills.

Resumes and applications

When you apply to a job you may upload a resume and provide answers to application questions set by the employer.

Assessments

If you take an assessment, we collect your answers, code submissions, time spent, and scores. Code submissions are sent to a sandboxed execution environment for evaluation only.

Organization and billing

Organizations provide a name, URL slug, and optional description, website, and logo. Billing information (payment method, invoices) is collected and processed by Stripe and is not stored on our servers.

Automatically collected information

When you sign in we record your IP address and browser user agent as part of your session for security purposes.

3. How we use your information

• Provide, maintain, and improve the Traced platform
• Authenticate your account and maintain session security
• Process job applications and deliver them to employers
• Run and grade assessments
• Process payments and manage subscriptions (via Stripe)
• Send transactional emails (account verification, password resets, application updates, assessment notifications)
• Respond to support requests

We do not sell your personal information. We do not use your data for advertising or build advertising profiles.

4. Third-party services

We share information with the following service providers to operate the platform:

• Stripe — payment processing. Stripe receives organization billing contact information and handles all payment data under its own privacy policy.
• Resend — transactional email delivery. Receives recipient email addresses and names to deliver account and application-related emails.
• Amazon Web Services — file storage. Stores uploaded files such as profile photos, organization logos, and resumes.

5. Cookies

Traced uses only essential session cookies to keep you signed in. We do not use analytics, advertising, or tracking cookies. No cookie consent banner is required because these cookies are strictly necessary for the service to function.

6. Data retention

• Your account and associated data are kept until you delete your account. When you request deletion, your account enters a 30-day grace period before permanent removal.
• Resumes are stored until you delete them from your account.
• Session records (IP address, user agent) are retained for the lifetime of the session and removed when the session expires or you sign out.

7. Your rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — update or correct inaccurate information through your account settings.
• Deletion — delete your account and personal data from your account settings.
• Portability — request your data in a portable format.

To exercise any of these rights, contact us at legal@traced.ca.

Canadian users (PIPEDA)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You may file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

California users (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and secure cloud infrastructure. No method of transmission or storage is 100% secure, but we take reasonable precautions to safeguard your information.

9. Children

Traced is not directed at anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the platform. Your continued use of Traced after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have questions or concerns about this privacy policy, contact us at legal@traced.ca.