Legal

Privacy Policy

Last updated: June 1, 2026

IntegraTrace, Inc. ("IntegraTrace," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our cloud identity security platform (collectively, the "Services"). By using the Services, you agree to the practices described in this policy.

1. Information we collect

We collect information you provide directly to us, such as your name, work email, company, and role when you request a report, book a demo, or contact us. When you connect a cloud environment, we collect identity and access metadata (for example, service accounts, roles, policies, and permission configurations) on a read-only basis. We do not collect or store the secret values of your credentials, keys, or tokens.

2. How we use your information

We use the information we collect to provide, maintain, and improve the Services; to generate discovery reports and analytics; to detect and respond to security risks; to communicate with you about your account and our products; and to comply with legal obligations. We do not sell your personal information.

3. How we share information

We may share information with service providers who perform services on our behalf (such as cloud hosting and analytics), subject to confidentiality obligations; with your consent or at your direction; and where required by law or to protect our rights. Identity and access metadata from your environment is never shared with other customers.

4. Data security

We maintain SOC 2 Type II controls and apply encryption in transit and at rest, least-privilege access, and continuous monitoring to protect your data. While no method of transmission or storage is completely secure, we work continuously to safeguard your information using industry best practices.

5. Data retention

We retain personal information for as long as necessary to provide the Services and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. You may request deletion of your information at any time, subject to legal and contractual obligations.

6. Your rights

Depending on your location, you may have the right to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will respond in accordance with applicable law.

7. Cookies and analytics

We use cookies and similar technologies to operate our website, remember your preferences, and understand how the site is used. You can control cookies through your browser settings. Some features may not function properly if cookies are disabled.

8. International data transfers

We may process and store information in countries other than your own. Where we transfer personal information across borders, we use appropriate safeguards consistent with applicable data protection laws.

9. Children's privacy

The Services are intended for businesses and are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Services or by other appropriate means.

11. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at support@integratrace.com or write to IntegraTrace, Inc., Privacy Team. We're happy to help.