Privacy Policy

1. Who we are

Traced ("we", "us", "our") is a hiring platform operated out of Canada. If you have questions about this policy or your personal information, contact us at legal@traced.ca.

2. Information we collect

We collect information you provide directly and information generated when you use Traced.

Account information

When you create an account we collect your first name, last name, username, and email address. You may optionally add a profile photo, title, bio, location, website, GitHub link, work experience, education, and skills.

Resumes and applications

When you apply to a job you may upload a resume and provide answers to application questions set by the employer.

Assessments

If you take an assessment, we collect your answers, code submissions, time spent, and scores. Code submissions are sent to a sandboxed execution environment for evaluation only.

Organization and billing

Organizations provide a name, URL slug, and optional description, website, and logo. Billing information (payment method, invoices) is collected and processed by Stripe and is not stored on our servers.

Automatically collected information

When you sign in we record your IP address and browser user agent as part of your session for security purposes.

Advertising measurement

We use the Meta Pixel and Meta Conversions API to measure and improve our ads on Facebook and Instagram. These share your page visits, sign-ups, and subscription activity with Meta, along with hashed contact details and browser identifiers. We do not share resumes, application answers, or assessment results with Meta.

3. How we use your information

• Provide, maintain, and improve the Traced platform
• Authenticate your account and maintain session security
• Process job applications and deliver them to employers
• Run and grade assessments
• Process payments and manage subscriptions (via Stripe)
• Send transactional emails (account verification, password resets, application updates, assessment notifications)
• Respond to support requests
• Measure and improve our advertising on Meta platforms (Facebook and Instagram)

We do not sell your personal information. We share limited information with Meta for advertising, as described above.

4. Third-party services

We share information with the following service providers to operate the platform:

• Stripe — payment processing. Stripe receives organization billing contact information and handles all payment data under its own privacy policy.
• Resend — transactional email delivery. Receives recipient email addresses and names to deliver account and application-related emails.
• Amazon Web Services — file storage. Stores uploaded files such as profile photos, organization logos, and resumes.
• Meta Platforms — advertising measurement. Receives the information described under Advertising measurement and handles it under its own privacy policy.

5. Cookies

Traced uses essential session cookies to keep you signed in. We also use Meta Pixel cookies (such as _fbp and _fbc) to measure our advertising on Meta platforms.

You can block or delete advertising cookies in your browser settings without affecting your ability to sign in. You can also control how Meta uses this information for ads in your Meta ad preferences.

6. Data retention

• Your account and associated data are kept until you delete your account. When you request deletion, your account is permanently removed within 30 days. You can cancel the request by logging back in within 14 days.
• Resumes are stored until you delete them from your account.
• Session records (IP address, user agent) are retained for the lifetime of the session and removed when the session expires or you sign out.
• Information shared with Meta for advertising measurement is retained by Meta under its own policy.

7. Your rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — update or correct inaccurate information through your account settings.
• Deletion — delete your account and personal data from your account settings.
• Portability — request your data in a portable format.

To exercise any of these rights, contact us at legal@traced.ca.

Canadian users (PIPEDA)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You may file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

California users (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and secure cloud infrastructure. No method of transmission or storage is 100% secure, but we take reasonable precautions to safeguard your information.

9. Children

Traced is not directed at anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the platform. Your continued use of Traced after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have questions or concerns about this privacy policy, contact us at legal@traced.ca.