Privacy Policy

1. Introduction

This Privacy Policy explains how Optrace ("Optrace," "we," "us," or "our") collects, uses, discloses, and protects information in connection with your access to and use of our website and subscription service (together, the "service"). Optrace is currently operated as a sole proprietorship based in the United Kingdom.

2. Information We Collect

We collect the following categories of information:

• Account information: your email address and password (stored in encrypted/hashed form by our authentication provider, Supabase);
• Payment information: processed directly by Stripe, our payment processor; we do not receive or store your full card number;
• Content you provide: personal notes you attach to saved opportunities within the service;
• Usage information: information about how you interact with the service, such as pages visited and features used, collected to operate and improve the service;
• Communications: correspondence you send to us, such as support requests sent to hello@useoptrace.com; and
• Technical information: standard technical data such as IP address, browser type, and device information, collected automatically as part of operating a website and web application.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the service, including authenticating your account and managing your subscription;
• Process payments and communicate with you about billing;
• Respond to your support requests and other communications;
• Send you service-related communications, such as email confirmations, password reset emails, and important notices about the service;
• Monitor and analyse usage to improve and maintain the security of the service; and
• Comply with our legal obligations.

We do not sell your personal information to third parties, and we do not use your personal information for third-party advertising purposes.

4. Data Sources for Opportunity Content

Separately from the account information described above, the commercial opportunity content within Optrace's database is compiled from publicly available sources such as news articles, press releases, and public announcements concerning commercial and industrial development projects. This process concerns publicly reported information about companies and projects, not personal data about private individuals, and is not addressed further in this Privacy Policy, which concerns your personal information as a user of the service.

5. Cookies and Tracking Technologies

Optrace uses cookies that are strictly necessary for the operation of the service, such as cookies used to maintain your logged-in session. We do not currently use third-party advertising or cross-site tracking cookies. If this changes in the future, we will update this Policy and, where required by law, obtain your consent.

6. Third-Party Service Providers

We rely on the following third-party service providers to operate Optrace, each of which processes certain information as our service provider or under its own applicable privacy terms:

• Supabase — database hosting and authentication;
• Stripe — payment processing;
• Vercel — website and application hosting;
• Resend — transactional email delivery (account confirmation, password reset, and related service emails); and
• Anthropic — artificial intelligence services used to assist in researching and drafting opportunity content, and to power the in-service conversational assistant.

Each of these providers is contractually or by policy restricted from using information they process on our behalf for their own independent purposes, except as necessary to provide their service to us.

7. Data Sharing and Disclosure

Other than sharing with the service providers described above, we disclose personal information only: where required to comply with applicable law, regulation, legal process, or governmental request; to protect the rights, property, or safety of Optrace, our users, or others; or in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.

8. International Data Transfers

Optrace is operated from the United Kingdom, and our service providers may process and store information in the United States or other countries. Where personal information is transferred internationally, we take steps intended to ensure it receives an adequate level of protection, including relying on service providers that maintain appropriate safeguards such as standard contractual clauses where applicable.

9. Data Security

We use industry-standard technical and organisational measures designed to protect your personal information, including encrypted connections (HTTPS/TLS), encrypted storage of passwords, and database-level access controls that restrict opportunity data to authenticated, paying subscribers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We retain your account information for as long as your account remains active. If you cancel your subscription, we may retain your account information for a reasonable period afterward for record-keeping, tax, and legal compliance purposes, after which it will be deleted or anonymised upon request, except where we are required or permitted by law to retain it longer.

11. Your Privacy Rights

Depending on your location, you may have rights in relation to your personal information, which may include the right to: request access to the personal information we hold about you; request correction of inaccurate information; request deletion of your information; request a copy of your information in a portable format; and object to or restrict certain processing of your information.

You can exercise these rights by contacting us at hello@useoptrace.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

12. UK and EU Data Subject Rights (GDPR)

As Optrace is operated from the United Kingdom, individuals located in the UK or European Economic Area have rights under the UK GDPR and/or EU GDPR as applicable, including the rights described in Section 11 above, as well as the right to lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office (ICO), if you believe we have not handled your personal information appropriately.

13. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of personal information. Optrace does not sell or share personal information as those terms are defined under the CCPA. You may exercise any applicable rights by contacting us at hello@useoptrace.com.

14. Texas Data Privacy and Security Act

As our primary customer base is located in Texas, we note that the Texas Data Privacy and Security Act (TDPSA) may apply to certain businesses processing Texas residents' personal data. Given Optrace's current scale of operations, we believe the small business exemption under the TDPSA is likely applicable; we will monitor this as the business grows and update our practices as necessary to remain compliant.

15. Children's Privacy

Optrace is a business-to-business service not directed to, or intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

16. Do Not Track

Some browsers offer a "Do Not Track" signal. There is currently no industry-standard interpretation of these signals, and Optrace does not currently respond differently to browsers with this signal enabled.

17. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify active subscribers, such as by email or a notice within the service, before the changes take effect.

18. Contact Us

Questions about this Privacy Policy, or requests relating to your personal information, can be directed to hello@useoptrace.com.