Privacy Policy

Overview

This policy explains how Trace Writing processes information when you use the Service. We aim to minimize data and keep OCR on the server.

Controller and Contact

Minor Role Inc., a Wyoming corporation, is the controller of your personal information when you use the Service. Contact support using the in‑app link or email us at support.

Information We Process

We process: (a) account and profile information you provide (e.g., email); (b) uploads you submit to create worksheets (e.g., images); (c) derived outputs needed to complete your request (e.g., OCR text and a generated PDF); (d) payment‑related metadata from our payment processor (we do not store card numbers); and (e) basic operational logs (e.g., request identifiers, timing, feature usage) to keep the Service reliable and secure.

How We Use Information

We use information to provide and improve the Service (OCR, PDF rendering, reliability, safety), manage accounts, plans and billing, protect against abuse and comply with legal obligations, and respond to support requests.

Uploads and OCR Processing

Uploads are processed server‑side for OCR and rendering. We delete uploads promptly after processing. Infrequently, stale uploads may be removed as part of routine maintenance. Derived outputs are returned to you and are not retained beyond what is necessary to complete your request.

Cookies and Local Storage

We use essential cookies to keep you signed in and secure the Service. We do not use analytics or advertising cookies. Your browser’s local or session storage may be used for non‑essential preferences. You can manage cookies in your browser.

Sharing with Service Providers

We use third‑party providers for hosting and infrastructure, authentication, payments, and AI/OCR. Providers who process information on our behalf include WorkOS (authentication), Stripe (payments), Supabase (database), Vercel and Vercel Blob (hosting/storage), and Google Generative AI (OCR). We do not sell personal information.

International Transfers

Information may be processed in other countries where we and our providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers.

Legal Bases

We rely on contract (to provide the Service), legitimate interests (security, reliability, limited measurement), consent where required, and compliance with legal obligations.

Retention

We keep information for as long as needed to provide the Service and meet legal obligations. Uploads are deleted promptly after processing; routine maintenance may remove stale uploads periodically. Operational logs are retained for a limited period; billing records are retained as required by tax and accounting laws.

AI/OCR Processing and Model Training

We do not use your private Content to train our own machine learning models. AI/OCR processing is performed by Google Generative AI subject to their terms.

Your Rights

Subject to applicable law, you may request access, correction, deletion, or a copy of your information, and you may cancel your subscription at any time. If you are in the EEA/UK/Switzerland, you may also object to or restrict certain processing and lodge a complaint with a supervisory authority. We do not “sell” or “share” personal information for cross‑context behavioral advertising. Contact support to make a request.

Children’s Privacy

Accounts are intended for adults (e.g., educators/guardians). We do not knowingly collect personal information from children. If you believe we have, contact support for deletion.

Security

We use appropriate technical and organizational measures to protect information. No system is perfectly secure; use strong passwords and safeguard your account. If we learn of a security incident impacting your information, we will notify you where required by law.

Changes and Contact

We will post updates to this policy in the app. For questions or data requests, use the in‑app support link or email us at support.