Privacy Policy
IndexHub, Inc. dba Tracecat
Effective: 19th March 2024
This Privacy Policy (the "Privacy Policy") serves to inform you of our policies and procedures regarding the collection, use and disclosure of the information we receive when you access and use the website (the "Site"), services, software, mobile applications, content, and all other products and services (all of the foregoing collectively, the "Services") owned, controlled or offered, directly or indirectly, by IndexHub, Inc. (together with its subsidiaries and affiliates, "Tracecat", "we," "our" or "us").
Tracecat believes that the privacy of its users is paramount and strives to use Personal Information (as defined below) only in ways outlined in this Privacy Policy. The Privacy Policy is incorporated by reference into our Terms of Service, currently available at Tracecat Terms of Service (the "Terms of Service"). By using the Services, you hereby warrant and represent that you have read, understand and agree to this Privacy Policy and the Terms of Service, that you are a resident of the United States and that you are over 18 years of age.
PLEASE DO NOT USE, INSTALL OR ACCESS THE SERVICES IF YOU DO NOT AGREE TO THIS PRIVACY POLICY.
1. What We Mean by Personal Information
For purposes of this Privacy Policy, "Personal Information" means any information from or about a person that either identifies that person directly or that makes that person identifiable when it is combined with other information from or about that person from any source.
This includes data such as names, email addresses, phone numbers, and any other identifiers that can be used to distinguish or trace an individual's identity.
2. Information We Collect
Information You Provide To Us
When you use the Services or otherwise communicate with us, we collect information that you provide to us directly. For example, we collect information in the following circumstances:
- Use our mobile apps or visit the Site
- Register for the Services or create an account
- Access the Services through social networking sites or third party services
- Subscribe to newsletters
- Purchase a product or service on the Site or in our mobile apps
- Invite your friends to join the Services
- Request technical support
- Contact us via the Site or otherwise communicate with us
Information Collected May Include:
- Name, email address, telephone number
- Financial and billing information
- Information for newsletter subscriptions
- Customer, supplier, or prospect information including company, title, and order details
- Transaction and limited (non-PCI) payment data
- Any other information you choose to share, such as recruitment/job application data
You can choose not to provide information that is requested; however, this may limit your ability to use or access the Services. If you contact us, a record of such correspondence may be kept.
3. Automatically Collected Information
Most of the data we collect in and through the Site and the Services is technical in nature and is collected and processed automatically through application programming interfaces, software development kits, cookies and similar software-based technologies.
Device Data:
- Device advertising IDs and similar hardware qualifiers
- Precise location data
Usage Data:
- Search terms entered
- Pages viewed
Network and Internet Information:
- URLs and Internet Protocol addresses
- Bounce rates and use of spoofing
- Active (TCP/IP) ports
- Number of sessions initiated and click streams
- Location information and network/Wi-Fi access points
We may use location based on IP address, network-based geo-location data, and/or GPS coordinates from your mobile device. Your GPS geo-location is accessed in accordance with your device settings.
Google Analytics is an element of the Site. You can opt out of Google Analytics by using a browser plugin available at Google's preferences plugin.
4. Information You Post on the Services
The Services may provide chat, forum or bulletin board tools to users and the ability to create an "avatar" or other customized profile and Account information. Information that you provide through the use of these tools will be available to the public generally.
IndexHub has no obligation to keep private any information that you disclose to other users or the public using these functions. You should exercise caution when deciding to disclose Personal Information through the use of these tools or functions.
We strongly recommend that you do not post any information through the Services that allows strangers to identify or locate you.
5. Information on Third Party Websites
The Services may include links to third party websites and social media services where you will be able to post comments, stories, reviews or other information.
Your use of these third party websites and social media services may result in the collection or sharing of information about you. We encourage you to review the privacy policies and settings on the third party websites and social media services with which you interact.
6. How We Use Cookies and Other Technologies
Some of the features on the Site and the Services require the use of "cookies" - small text files that are stored on your device's hard drive. We use cookies to measure which pages are being accessed, and which features are most frequently used.
Required Cookies
Enable you to navigate the Site and use features like accessing secure areas. These cookies allow us to uniquely identify you when logged in and process your online transactions.
No option to opt out - essential for operation.
Performance Cookies
Collect information about how you use our Sites, including which pages you visit most often. This information is only used to improve how the Site functions.
Can opt out via browser settings.
Functionality Cookies
Allow our Sites to remember information you have entered or choices you make (such as your username, language, or region) and provide enhanced, more personal features.
Can opt out via browser settings.
Targeting/Advertising Cookies
We may engage third parties to track and analyze usage. These cookies remember which browsers have visited the Site to present retargeted advertising based on your previous interactions.
Can opt out via advertising network settings.
We and our service providers may also use "pixel tags," "web beacons," "clear GIFs," or similar means to track user actions and compile aggregate statistics about Site usage and response rates.
7. Use of Collected Information
We use the information you provide to:
- Provide the Services, including collecting payment for paid features
- Administer your use of the Services and any Accounts
- Personalize your experience
- Provide Service announcements or inform you of new releases
- Provide further information and offers we believe you may find useful
- Perform tasks on behalf of third parties (payment processors, service providers)
Additional uses include:
- Enforce our Terms of Service
- Resolve disputes between users
- Comply with legal requirements including subpoenas and court orders
- Protect our rights, property, or safety and those of our users
- Contact you for feedback regarding the Site and Services
- Monitor and analyze use of the Services
- Improve the Site and Services
- Verify that users meet required criteria
8. Third Parties We Share Personal Information With
We may disclose Personal Information you provide to us or that we collect automatically with the following categories of third parties:
- Service providers - payment processors, web hosting, data storage, marketing, and communications service providers
- Advertising partners - in compliance with applicable law
- Public authorities - such as law enforcement, if legally required or to protect our rights or the rights of third parties
- Subsidiaries and affiliates - or a subsequent owner in connection with a corporate merger, consolidation, sale of assets, or bankruptcy proceedings
9. Links to Other Websites
We frequently make content or services from other websites available to you from links located on the Site. We may present links in a format that enables us to keep track of whether these links have been followed.
You may opt to link your Account to your social media account or other accounts (Facebook, Twitter, Google) in accordance with your Account settings and respective policies of these third parties.
This Privacy Policy applies only to the Site and the Services. We do not exercise control over third party services or other websites. Your interactions with these third party services are governed by their privacy policies.
We encourage you to read the privacy policies and other terms of third parties before using their services.
10. Security
We understand the importance of privacy and security of Personal Information to our users and have made them a priority. Tracecat uses a variety of industry-standard security technologies and procedures to help protect Personal Information about you from unauthorized access, use, or disclosure.
We train Tracecat employees on privacy and security issues. However, we cannot guarantee that unauthorized third parties will never be able to overcome those measures, and we do not promise that Personal Information about you or private communications will be protected from unauthorized disclosure or use.
11. Do Not Track Signals
Some web browsers transmit "do-not-track" signals to websites. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them.
We currently do not take action in response to these signals.
12. Managing Your Privacy
We keep your data on your behalf and for your benefit. You can correct or terminate and delete your Account information by following the instructions on the Services or by e-mail at privacy@tracecat.com.
If you cancel your Account or request us to delete your information, Tracecat will limit its access to Personal Information to perform what is requested by you and will delete information accessible to Tracecat within seven business days.
13. California Residents
California Civil Code Section 1798.83 requires certain businesses that share customer Personal Information with third parties for direct marketing purposes to respond to requests from California customers about such practices.
We currently do not share or disclose your Personal Information to third parties for direct marketing purposes.
Requests to Know - You have the right to request disclosure of:
- Categories of Personal Information collected about you
- Categories of Personal Information sold or disclosed for business purposes
- Categories of sources from which we collected Personal Information
- Business or commercial purposes for selling or collecting Personal Information
- Categories of third parties to whom Personal Information was sold
- Specific pieces of Personal Information collected
Requests to Delete
You have the right to request that we delete any Personal Information about you that we have collected. Upon receiving a verified request, we will do so unless otherwise required or authorized by law.
Authorized Agents
You may designate an authorized agent to make requests on your behalf. You must provide written permission, and we may require that you verify your identity directly with us.
The Right to Non-Discrimination
You have the right not to be discriminated against for exercising your California privacy rights. We will not deny goods/services, charge different prices, or provide different quality based on your exercise of these rights.
We do not sell, and have not in the prior 12 months sold, Personal Information about California residents.
14. International Transfers of Personal Information
IndexHub is based in the United States. As a result, Personal Information that we collect in and through the Services and on the Site may be transferred to our U.S. offices.
We may work with third-party service providers in the U.S. and in other countries to support our business activities. Personal Information may be transferred to, stored on servers in, and accessed from countries other than the country in which it was initially collected.
15. Data Retention
We keep Personal Information related to your Account for as long as it is needed to fulfill the purposes for which it was collected, to provide our services, to deal with possible legal claims, to comply with our business interests and/or to abide by all applicable laws.
Thereafter, we either delete Personal Information about you or de-identify it. Even if you request deletion, we may be required by law to retain the Personal Information. Once those requirements are removed, we will delete Personal Information in accordance with your request.
16. Changes to the Privacy Policy
Our security and Privacy Policy are periodically reviewed and enhanced as necessary. This Privacy Policy might change as we update and expand the Services.
We will endeavor to notify you of these changes by email, but will not be liable for any failure to do so. Your continued use of the Services after any change in this Privacy Policy will constitute your acceptance of such change.
17. Contacting Us
If you have any concerns or questions about this Privacy Policy, please contact us at privacy@tracecat.com.
If you do not understand any of the terms or conditions of any of our policies, you may also inquire via email at the same address.
Methods for Submitting Consumer Requests
You may submit a request for access and requests to delete Personal Information about you via email to privacy@tracecat.com
Upon receipt of a request, we may ask you for additional information to verify your identity. Any additional information you provide will be used only to verify your identity and not for any other purpose.
We will acknowledge receipt of your request within 10 days. Subject to our ability to verify your identity, we will respond within 45 days. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.