Trace-AI Inc. is a Canadian engineering studio. This is the short, plain-language version of how we handle the limited personal data you share with us.
We only collect what you actively send us. There are no tracking pixels, no analytics scripts, no advertising cookies, no third-party tag managers on this site. The only personal data we hold is what you submit through the contact form or the newsletter subscription form on the Insights page.
Trace-AI Inc. ("we", "us", "our"), an Ontario-incorporated engineering studio based in Toronto, Canada, is the data controller for any personal information collected through this website (trace-ai.ca).
You can reach us at hello@trace-ai.ca for any privacy-related question, including data-access requests under PIPEDA.
When you submit the contact form on trace-ai.ca/contact, we receive:
We use this information solely to respond to your inquiry and discuss potential engagement. We do not enrich it, cross-reference it with third-party data, or sell it.
If you subscribe to the Insights newsletter, we collect your email address only. We use it to send occasional engineering posts (typically less than one per month). Unsubscribe at any time using the link in every email, or by emailing hello@trace-ai.ca.
Our hosting provider (Cloudflare) keeps standard access logs containing IP addresses, timestamps, requested URLs and user-agent strings for a limited period for security and abuse-prevention purposes. We do not query these logs for marketing.
This site uses no advertising or analytics cookies. We use only the following client-side storage:
traceai:consent) —
remembers your cookie-banner choices (necessary vs. analytics vs.
preferences) so we don't ask again on every visit.
traceSession) —
created only if you sign in to the client area. Holds
your session (email address and sign-in time) for the
duration of the browser tab; removed when you sign out
or close the tab. Not transmitted to any server.
No cookies are used for advertising, profiling, or cross-site tracking. Disabling browser storage will not break the public site; it will simply re-show the consent banner on each visit (and prevent client-area sign-in). You can update your choices at any time via the button (also linked in the footer).
We do not sell, rent, or trade personal data. We share limited data only with:
We do not transfer personal data outside Canada except to the extent that the hosting and email providers route traffic through their global infrastructure (typical for edge CDNs and email delivery).
You have the right to:
To exercise any of these rights, email hello@trace-ai.ca. We will respond within 30 days.
When we engage with clients on platforms that handle regulated personal data (e.g. patient data in a pharmacy stack), that data is the client's, not ours, and is governed by the client's own privacy policies and the architecture boundaries we design with them. We do not hold patient data on our infrastructure. See our case study on regulated integrations for how we think about that boundary.
We keep contact-form submissions for as long as the prospect or engagement is active, plus three years for record-keeping, then delete. Newsletter subscriptions are kept until you unsubscribe.
This site is not directed at children under 13. We do not knowingly collect data from children.
We will post material changes to this policy on this page with an updated "last updated" date. For substantive changes affecting how we use existing data, we will email newsletter subscribers in advance.
Trace-AI Inc.
[Business address — TBC]
Toronto, ON, Canada
hello@trace-ai.ca