Privacy Policy

1 Overview & Who We Are

TraceMediaa is a content protection platform operated by Truma Solutions LLC ("we," "us," or "our"). We help creators protect their digital content — photos, videos, and other media — by embedding invisible watermarks, scanning the internet for unauthorized use, and enabling legal action when theft is found.

    Plain English: We only collect what we need to protect your content and run the app. We do not sell your data. We do not track you for advertising.
  

Registered DMCA Agent: Truma Solutions LLC · Registration Number DMCA-1072447 · US Copyright Office

Jurisdiction: United States. We comply with applicable US privacy laws and make reasonable efforts to honor GDPR and CCPA rights for users in those regions.

2 Information We Collect

A. Information You Provide

Account Information: Name, email address, and password when you create an account
Display Name: The name shown on your profile and creator certificates
Content You Upload: Photos, videos, and other media files you submit for protection
Reports: URLs and descriptions you submit when reporting stolen content
Support Messages: Content of messages you send to our support team

B. Information Generated Automatically

TraceID: A unique identifier embedded as an invisible watermark in each piece of protected content
Scan Results: URLs, platform names, and metadata of matches found when scanning for stolen content
Alert History: Records of when and where your content was found (kept even after alerts are archived)
Usage Data: Scans used, DMCA notices sent, licenses issued — for plan limit enforcement only

C. Device & Technical Information

Push Notification Token: A device-specific token from Apple used only to send you alerts about your content
App Version: Used for debugging and support

D. Payment Information

Subscription Status: Whether you have an active Pro subscription (managed entirely by Apple's App Store — we never see your card details)
Stripe Connect: If you connect a bank account to receive licensing payouts, Stripe handles all financial data. We store only your Stripe account ID.

    What we do NOT collect: Location data · Contacts · Browsing history · Advertising identifiers (IDFA) · Microphone · Camera feed · Face ID/biometric data
  

3 How We Use Your Information

Purpose	Data Used	Legal Basis
Create and manage your account	Name, email, password	Contract performance
Watermark and protect your content	Uploaded files, TraceID	Contract performance
Scan the internet for stolen content	Content thumbnails, TraceID	Contract performance
Send you alerts when content is found	Push token, email	Contract performance
File DMCA takedown notices on your behalf	Name, email, content info, TraceID	Contract performance / your instruction
Process licensing payments you initiate	Stripe account ID	Contract performance
Enforce plan usage limits	Usage counts	Contract performance
Send service emails (confirmations, alerts)	Email address	Contract performance
Provide customer support	Email, support messages	Legitimate interest
Improve the service	Aggregated, anonymized usage data	Legitimate interest
Comply with legal obligations	As required	Legal obligation

We do not use your data for advertising, profiling, or sale to third parties.

4 How We Share Your Information

We only share your data with third parties where necessary to provide the service:

Service	Purpose	Data Shared	Privacy Policy
Cloudinary	Secure media storage & processing	Uploaded photos/videos	cloudinary.com/privacy
Google Vision API	Reverse image search — find stolen content	Content thumbnail URLs	policies.google.com/privacy
Stripe	Licensing payout processing	Email, Stripe account ID	stripe.com/privacy
SendGrid / SMTP	Transactional email delivery	Email address, message content	sendgrid.com/privacy
Apple APNs	Push notifications	Push notification token	apple.com/privacy
MongoDB Atlas	Encrypted database hosting	All stored account/content data	mongodb.com/privacy-policy

All third-party providers are contractually bound to process your data only for the stated purpose and to maintain appropriate security standards.

We may also disclose data:

If required by law, court order, or governmental authority
To protect the rights, property, or safety of TraceMediaa, our users, or the public
In connection with a merger, acquisition, or sale of assets (you will be notified)

Never Sold No Advertising No Data Brokers

5 Data Storage & Security

All data is stored on servers located in the United States. We implement the following security measures:

HTTPS/TLS All data encrypted in transit
Encrypted at rest Database and media files encrypted at rest
JWT Authentication Secure token-based authentication, short-lived tokens
Rate Limiting Protection against brute force and abuse
Helmet Headers Security headers on all API responses
MongoDB Sanitization Input sanitized to prevent injection attacks
Passwords Hashed bcrypt with 12 rounds — we cannot see your password

No security system is 100% perfect. If you believe your account has been compromised, contact us immediately at security@tracemedia.app.

6 Data Retention

Active accounts: Data retained while your account is active
Deleted accounts: All personal data permanently deleted within 30 days of account deletion
Alert history: Location history of where your content was found is retained until account deletion — this protects your ability to take legal action
DMCA case records: Retained for 3 years to support any ongoing legal proceedings
Anonymized analytics: Aggregated, non-identifying data may be retained indefinitely

You can delete your account at any time in Settings → Delete Account.

7 Your Rights & Choices

You have the following rights regarding your personal data:

Right	How to Exercise
Access — Get a copy of your data	Email privacy@tracemedia.app
Correction — Update inaccurate information	Settings → Edit Profile in the app
Deletion — Delete your account and all data	Settings → Delete Account (or email us)
Portability — Export your data	Email privacy@tracemedia.app
Opt out of emails — Stop marketing emails	Unsubscribe link in any email, or email us
Push notifications — Disable at any time	iOS Settings → Notifications → TraceMediaa
Manage subscription — Cancel or change plan	iOS Settings → Apple ID → Subscriptions

We will respond to all requests within 30 days. We may ask you to verify your identity before fulfilling a request.

California residents (CCPA): You have the right to know what data we collect, request deletion, and opt out of sale (we do not sell data). Contact us at privacy@tracemedia.app.

8 Children's Privacy

TraceMediaa is not directed at children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@tracemedia.app and we will delete it promptly.

9 Third-Party Services & Links

The app may contain links to third-party websites (e.g., platform terms pages, Stripe onboarding, Apple subscriptions). This Privacy Policy does not apply to those services. We encourage you to review their privacy policies.

When you use the Stripe Connect feature to receive payouts, you are also subject to Stripe's Privacy Policy.

When you purchase a subscription through the App Store, Apple's privacy practices apply to that transaction. See apple.com/privacy.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

Update the "Last Updated" date at the top of this page
Send an in-app notification for material changes
Email registered users for significant changes affecting their rights

Continued use of the app after changes are posted constitutes acceptance of the updated policy.

📋 Table of Contents