Scope and who is responsible
This Notice applies to Echo's closed-alpha website, chat experience, APIs, and related communications. Tracer AI, Inc. (“Tracer,” “we,” “us”) is responsible for the personal information described here. It does not cover third-party services you choose to use independently.
Echo is a private, pre-release product. The Closed-Alpha Terms of Use and Acceptable Use Policy also apply.
Information we collect
Identity and access information
We collect your email address, encrypted authentication credentials managed by our authentication provider, email-verification status, authentication events, session information, and related security records. Each invited user creates an individual account. If you create or use an API key, we collect key metadata and associated activity.
Content
We collect prompts, chat messages, responses, conversation titles, feedback, and other information you submit or generate through Echo, together with metadata associated with that Content.
Usage, device, and log information
We collect information about how Echo is used. This may include timestamps, features and endpoints used, request and response status, model or routing information, token and cost estimates, error and safety events, IP address, browser or device information, and diagnostic logs.
Communications
We collect information you send when you request support, report a problem, participate in research, or otherwise communicate with us.
Test-payment information
Echo does not currently charge users. Any Stripe flow is in test mode. If you interact with it, Stripe may process test transaction details and return related status or identifiers to us. Do not enter real payment-card information into a test flow.
How we use information
We use personal information to:
- authenticate invited users and provide, maintain, and troubleshoot Echo;
- send Content to provider APIs and return generated responses;
- monitor performance, measure usage, understand feature behavior, and manage capacity and costs;
- evaluate and improve Echo, its service behavior, safeguards, and user experience, including through automated analysis and limited human review;
- detect abuse, enforce rate limits and policies, investigate incidents, and protect users, Tracer, and the service;
- respond to communications and send operational or alpha-related notices; and
- comply with law, exercise or defend legal claims, and enforce our agreements.
Where law requires a legal basis, we rely as applicable on performing our agreement with you, our legitimate interests in operating, securing, evaluating, and improving Echo, your consent, and compliance with legal obligations.
How alpha Content is reviewed and improved
Alpha review. Tracer may use your prompts, chats, outputs, feedback, and usage data to operate, secure, evaluate, and improve Echo. This includes automated analysis and limited review by authorized people for quality evaluation, debugging, safety, abuse prevention, and product research.
Do not submit information that you are not authorized to share or that requires heightened legal or contractual protection. Echo is not intended for protected health information, patient records, financial account credentials, payment-card data, government identification numbers, biometric identifiers, precise location histories, data about children, trade secrets you cannot authorize us to process, or other regulated or highly sensitive data. Tracer does not offer a HIPAA business associate agreement for this alpha.
Retention and deletion
Browser storage
Echo stores chat history in your browser for local display. It generally remains there until you use available local controls, clear site data, or remove it through browser settings. Clearing a browser copy does not necessarily delete server-side copies.
Alpha systems
Tracer currently stores chats and associated usage data in Supabase and Google Cloud Storage and is targeting a 365-day retention period for this alpha.
Deletion is still being completed. Automated retention enforcement and user deletion are not yet fully implemented. We therefore cannot promise that all Content or related records will be deleted exactly at 365 days or immediately after a request. Data may remain longer while we complete deletion tooling, in backups, or where needed for security, legal compliance, fraud prevention, disputes, or enforcement.
Access and account records are generally kept while your alpha access remains active and as reasonably necessary afterward for security, audit, legal, and enforcement purposes. Service providers may retain information under our agreements with them and their applicable retention practices.
You may request deletion at adam@tracerml.ai. We will evaluate and act on requests as required by applicable law. Because deletion systems are incomplete, removal may not be immediate or complete across every copy; we will explain material limitations when responding.
Security and international processing
We use administrative, technical, and organizational measures designed to protect information, including access controls and security monitoring. No system is completely secure, particularly during an alpha. Keep your password, invite code, sessions, and API keys confidential, and contact us promptly if you suspect unauthorized access.
Tracer is based in the United States. We and our providers may process information in the United States and other countries whose privacy laws may differ from those where you live. Where required, we use legally recognized safeguards for international transfers.
Your choices and privacy rights
Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, deletion of, or a copy of personal information; object to or restrict certain processing; withdraw consent where processing relies on consent; or appeal a denied request. You also may have a right not to receive discriminatory treatment for exercising privacy rights.
Send a request to adam@tracerml.ai. Describe the request and the email address used for Echo. We may need to verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, but we may require proof of authorization.
Because we do not sell personal information or share it for cross-context behavioral advertising, we do not offer an opt-out for those activities. You can limit local browser storage by using Echo's local controls or your browser settings, but doing so may affect functionality.
Age limit, changes, and contact
Not for people under 18
Echo is not directed to or permitted for anyone under 18, and we do not knowingly collect personal information from people under 18. If you believe a person under 18 has provided information, contact us so we can investigate and take appropriate action.
Changes to this Notice
We may update this Notice as Echo and our practices change. We will post the revised version with a new effective date and provide additional notice when required by law.
Contact
For privacy questions or requests, email Tracer AI, Inc. at adam@tracerml.ai.