Privacy Policy

Effective Date: February 24, 2026

Last Updated: February 24, 2026

TracyChat is responsible for the collection, use, and processing of personal information obtained through tracychat.com. This Privacy Policy describes the categories of personal information we collect, the purposes for which we process it, how it is shared and retained, and the rights available to you in connection with your personal information. This policy applies to all users of the Site, including visitors, assessment participants, booking contacts, and job applicants.

This Privacy Policy does not constitute legal advice. If you have questions about your specific rights under applicable privacy law, you should consult a qualified legal professional.

Who We Are

TracyChat is a consulting and AI implementation practice operating through tracychat.com. References to "we," "us," and "our" in this policy refer to TracyChat. We act as the data controller with respect to personal information collected directly through the Site.

Personal Information We Collect

We collect contact information including your name, email address, and phone number when you submit a booking request, contact form, or intake inquiry. We collect booking and intake data including your timezone, preferred meeting slot, intake message, how you heard about us, and any referral source or UTM parameters associated with your session at the time of submission. We collect assessment data including your responses to the AI-readiness questionnaire, your generated score and recommended path, and the tokenized identifier associated with your assessment report. We collect careers application data including the role you are applying for, your application message, your uploaded resume in file form and as extracted text, and your portfolio URL if provided. We collect usage and analytics data in anonymized and aggregated form through Plausible Analytics, including pages visited, referral sources, and general traffic patterns. Plausible does not use cookies and does not track individuals across sessions or websites. We collect technical browser data through the use of localStorage and sessionStorage during the assessment flow, which is used to preserve your progress and responses between assessment pages. This data is stored locally in your browser and is not independently transmitted to our servers apart from your final assessment submission.

How We Collect Your Information

We collect personal information through web forms including the booking form, contact form, assessment submission form, and careers application form. We collect information through the API endpoints that process those form submissions. We collect assessment progress data through the use of browser-side storage on assessment pages. We collect anonymized usage data through the Plausible Analytics script that is loaded as part of our site layout. We do not use third-party advertising networks, cross-site tracking cookies, or behavioral profiling tools.

Why We Process Your Information

We process your contact information and booking data in order to respond to your inquiry, qualify your request, schedule and confirm a discovery call, and create the associated calendar event. We process your assessment responses and generated outputs in order to produce and deliver your personalized AI-readiness report. We process careers application data, including your resume and application message, in order to evaluate your application for current or future employment opportunities. We process usage and analytics data to understand aggregate patterns in how the Site is used and to improve its performance and content. We process technical data to ensure the continuity and functionality of the assessment flow. We may also process personal information as necessary to operate and secure the Site, detect and prevent abuse or unauthorized access, and fulfill any legal obligations applicable to TracyChat.

We do not use your personal information for automated decision-making that produces legal effects or similarly significant consequences affecting your rights or interests.

Legal Bases for Processing

For users located in the European Union or United Kingdom, we rely on the following legal bases for processing personal information. We process booking and inquiry data on the basis of steps taken at your request prior to entering into a contract, and for the performance of any resulting agreement. We process data for Site security, service improvement, and analytics on the basis of our legitimate interests, where those interests are not overridden by your rights and freedoms. Where required by applicable law, we rely on your consent, which you may withdraw at any time by contacting us using the information provided at the end of this policy. For users located in Canada, we collect and process personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Who We Share Your Data With

We do not sell your personal information. We share personal information only with the third-party service providers necessary to operate the Site and deliver our services. Firebase, operated by Google, processes data as part of our hosting, database storage, and file storage infrastructure. Resend processes email address and booking information for the purpose of delivering transactional confirmation and notification emails. Google Calendar processes booking data including your name, email address, and scheduled time for the purpose of creating and managing calendar events. Plausible Analytics processes anonymized usage event data for the purpose of website analytics. One or more AI model providers process your assessment responses for the purpose of generating your assessment report. Each of these providers acts as a data processor and processes personal information only as necessary to perform their contracted function. We do not authorize any provider to use your personal information for their own marketing, advertising, or profiling purposes.

How Long We Keep Your Information

We retain inbound inquiries and booking records for up to twenty-four months from the date of last contact. We retain assessment data and report tokens for up to twenty-four months from the date of submission. We retain careers application materials, including resumes and application messages, for up to twelve months from the date of submission unless you have expressly consented to longer retention for consideration in future hiring processes. Analytics event data is retained in accordance with Plausible's default configuration and consists of anonymized aggregate data only. Browser storage data persists locally in your browser until you clear it and is not subject to server-side deletion controls after submission. We may retain personal information beyond these periods where required by applicable law, necessary to protect TracyChat's legal rights, or reasonably required in connection with the investigation or resolution of a dispute.

Cookies and Browser Storage

This Site does not use traditional tracking cookies for analytics or advertising purposes. We use localStorage and sessionStorage in your browser to support the assessment flow, specifically to preserve your questionnaire responses and navigation progress as you move between pages. This data is stored locally on your device and is transmitted to our servers only upon final submission of the assessment. The Plausible Analytics script embedded in our site does not set any cookies and does not store persistent identifiers on your device. You may clear your browser's local and session storage at any time through your browser settings without affecting your ability to use other parts of the Site.

How We Protect Your Information

We implement reasonable technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission via HTTPS across all pages and endpoints of the Site, vendor-managed cloud security infrastructure provided by Firebase and Google Cloud, access controls that limit which personnel can access stored data, and routine review of data flows and integrations. No method of data transmission or storage is completely secure. We cannot guarantee the absolute security of your personal information, but we are committed to applying industry-appropriate safeguards and to notifying affected users in the event of a data breach as required by applicable law.

International Data Transfers

Because we use cloud-based service providers, personal information collected through the Site may be transferred to and processed in countries outside of your own, including the United States. Where required by applicable law, we rely on appropriate transfer safeguards as implemented and maintained by our service providers. Google and Firebase maintain compliance programs that address international data transfers, including the use of Standard Contractual Clauses for transfers subject to the GDPR.

Your Privacy Rights

Depending on your jurisdiction, you may have the right to request access to the personal information we hold about you, to request correction of inaccurate or incomplete information, to request deletion of your personal information subject to applicable legal retention requirements, to withdraw consent where processing is based on consent, to object to or request restriction of certain processing activities, and to lodge a complaint with the applicable data protection or privacy authority in your jurisdiction, including the Office of the Privacy Commissioner of Canada, the Information Commissioner's Office in the United Kingdom, or your applicable EU supervisory authority.

To exercise any of these rights, please contact us at hello@tracychat.com. We will respond to verifiable requests within thirty days or such other period as required by applicable law. We may need to verify your identity before processing your request.

Children

This Site is not directed to children under the age of thirteen and we do not knowingly collect personal information from children. If you believe that a child under the age of thirteen has submitted personal information through the Site, please contact us at hello@tracychat.com and we will take steps to delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we do, we will update the Effective Date and Last Updated fields at the top of this page. Continued use of the Site following any update constitutes acceptance of the revised policy. We encourage you to review this page periodically.

Contact

For questions, requests, or concerns regarding this Privacy Policy or the handling of your personal information, please contact us at hello@tracychat.com.