Privacy Policy

Last updated: March 28, 2026 | Tracebuster Technologies, Pune, India

1. Information We Collect

When you use Tracebuster, we collect: (a) email address, phone number, or IP address you provide for scanning, stored only as cryptographic hashes; (b) scan results encrypted with AES-256-GCM using per-user keys; (c) account information if you register (email hash, subscription tier); (d) usage analytics (anonymized, no PII).

2. How We Use Your Data

We use your data exclusively to: perform digital footprint scans, process data removal requests, send scan completion notifications, maintain your account and subscription, and improve scanning accuracy. We never sell, share, or trade your personal data.

3. Data Storage and Encryption

All personal data is encrypted at rest using AES-256-GCM with hardware-backed encryption keys. Data in transit is protected by TLS 1.3. Raw identifiers (email, phone, IP) are never stored in plaintext. We use SHA-256 with per-column salts for lookup hashes.

4. Data Retention

Scan results: 90 days (auto-purged). Deletion records: 1 year (compliance proof). Audit logs: 2 years (encrypted). Payment records: 7 years (legal requirement). Account data: until you request deletion.

5. Your Rights (DPDPA)

Under the Digital Personal Data Protection Act, 2023, you have the right to: access your data, correct inaccurate data, delete your data, withdraw consent, and file grievances. Exercise these rights from your dashboard or by contacting support@tracebuster.in.

6. GDPR Compliance

For EU residents: we process data on the lawful basis of consent. You may request data portability, object to processing, or lodge complaints with your supervisory authority.

7. Third-Party Services

We integrate with: Have I Been Pwned (breach data), AbuseIPDB (IP reputation), Razorpay and Stripe (payments), SendGrid (transactional email). Each processor is bound by data processing agreements. No third party receives your raw PII.

8. Cookies

We use essential cookies only for session management and theme preference. No tracking cookies, no advertising cookies, no third-party analytics that collect PII.

9. Changes to This Policy

We may update this policy periodically. Changes will be posted on this page with an updated date. Continued use of Tracebuster after changes constitutes acceptance.

10. Contact

For privacy concerns: support@tracebuster.in | Tracebuster Technologies, Pune, India.