Privacy Policy

1. Introduction

tra8me ("we," "our," or "us") is committed to protecting the privacy of everyone who uses our platform. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit tra8me.com and use any features, products, or services we offer (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

This Privacy Policy is incorporated by reference into our Terms & Conditions.

2. Information We Collect

We collect information in the following ways:

2a. Information You Provide Directly

• Account Registration: When you sign in via Google OAuth, we receive your name, email address, and profile image as provided by Google. We do not store your Google password.
• Weave Responses: Your answers to cognitive weave assessments, including the timing and pattern of your responses, are collected and stored to generate your archetype profile.
• Payment Information: If you subscribe to a paid tier, payment processing is handled entirely by our third-party payment processor (Lemon Squeezy). We do not store your credit card number, CVV, or full billing address on our servers. We receive only a confirmation of payment and subscription status.
• Support Communications: If you contact us by email, we retain your email address and the content of your message to respond to your inquiry.

2b. Information Collected Automatically

• Session Data: Standard web server logs, including IP address, browser type, operating system, referring URLs, and pages visited, may be retained for security and operational purposes.
• Local Storage: We use browser localStorage to temporarily store in-progress weave state (so you can resume an interrupted session) and your color theme preference. This data never leaves your device unless you are signed in and we sync it to our servers.
• Cookies: We use session cookies strictly necessary for authentication (via NextAuth.js). We do not use third-party advertising cookies or tracking pixels.

2c. Anonymized and Aggregate Data

We may derive and retain aggregate, de-identified, or anonymized data from weave activity - for example, statistical distributions of archetype outcomes across all users. This data cannot reasonably be used to identify any individual and is not subject to this Privacy Policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating and storing your archetype profile and weave results.
• Process transactions and send related information, including purchase confirmations and subscription receipts.
• Personalize your experience, such as remembering your speed preference and color theme.
• Improve and develop the Service, including understanding usage patterns and optimizing weave question sets.
• Enforce our Terms & Conditions and protect the integrity of the platform against fraud or abuse.
• Respond to your comments, questions, and requests for customer support.
• Send transactional or account-related communications (e.g., password reset, payment receipt). We do not send unsolicited marketing emails without your explicit consent.
• Comply with applicable laws, regulations, legal processes, or governmental requests.

We do not sell your personal information. We do not use your weave responses or archetype profile for advertising targeting, data brokering, or sale to any third party.

4. Sensitive Nature of Weave Data

tra8me collects your instinctive responses to abstract stimuli for the purpose of generating a cognitive and behavioral profile. While tra8me is not a medical, psychiatric, or clinical tool, we recognize that behavioral and cognitive data is inherently personal. We apply the following principles:

• Your weave results are stored in association with your account, not shared publicly by default.
• We do not share your individual weave responses or archetype profile with employers, insurers, government agencies, or any third party for profiling or decision-making purposes.
• Weave results are used solely to render your personal dashboard and generate your reports within the Service.
• You may delete all weave data at any time from your Settings page without deleting your account, or delete your entire account to remove all data permanently.

5. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Contractual Necessity: Processing required to provide you with the Service you have requested, including account creation, weave generation, and subscription management.
• Legitimate Interests: Improving and securing the Service, detecting fraud, and maintaining platform integrity, where these interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent (e.g., optional communications), you may withdraw it at any time without affecting the lawfulness of prior processing.
• Legal Obligation: Where processing is required to comply with applicable law.

6. Disclosure of Your Information

We do not sell, trade, rent, or otherwise share your personal information with third parties except in the following limited circumstances:

• Service Providers: We engage trusted third-party vendors who process data on our behalf solely for the purpose of providing the Service. These include hosting infrastructure, payment processing (Lemon Squeezy), and authentication (Google OAuth via NextAuth.js). These providers are contractually prohibited from using your data for any purpose other than performing services for us.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, court order, or in response to a valid governmental request.
• Protection of Rights: We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms & Conditions.
• Business Transfers: If tra8me is acquired by or merged with another company, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website prior to any such transfer and before your information becomes subject to a materially different privacy policy.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

• Account data is retained for the lifetime of your active account.
• Weave session data is retained indefinitely to support your historical dashboard, unless you delete it via Settings or delete your account.
• Payment records may be retained for up to 7 years as required by applicable financial regulations.
• Server logs are retained for up to 90 days and then deleted.

When you delete your account, we initiate permanent deletion of all personally identifiable information associated with your account within 30 days, except where retention is required by law.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure (Right to be Forgotten): Request deletion of your personal data. You may delete all weave data or your entire account directly from your Settings page.
• Portability: Request a machine-readable export of your data. Contact us at the email below to make this request.
• Restriction / Objection: Request restriction of processing or object to certain uses of your data.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
• Lodge a Complaint: If you are in the EEA, you have the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at privacy@tra8me.com. We will respond within 30 days (or sooner as required by applicable law). We may need to verify your identity before processing certain requests.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, disclose, and sell.
• The right to delete personal information we have collected from you, subject to certain exceptions.
• The right to opt-out of the sale or sharing of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.
• The right to limit the use and disclosure of sensitive personal information.

To submit a verifiable consumer request, contact us at privacy@tra8me.com.

10. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information as quickly as possible. If you believe a child under 13 has provided us with personal information, please contact us at privacy@tra8me.com.

Users between the ages of 13 and 18 should review this Privacy Policy with a parent or guardian before using the Service.

11. Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• Encrypted connections via HTTPS/TLS for all data in transit.
• Hashed and salted authentication tokens; we do not store plaintext credentials.
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular review of our data handling and security practices.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights or freedoms, we will notify affected users and applicable authorities as required by law.

12. Third-Party Links and Services

Our Service may contain links to third-party websites or services that are not owned or controlled by tra8me. This Privacy Policy does not apply to those third-party sites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party services. We encourage you to review the privacy policy of every site you visit.

13. International Data Transfers

tra8me is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of information to countries outside your country of residence, which may have different data protection rules than those in your country.

Where required by applicable law (including GDPR), we rely on appropriate transfer mechanisms such as Standard Contractual Clauses to facilitate cross-border data transfers from the EEA, UK, or Switzerland.

14. Disclaimer - Not a Clinical Tool

tra8me generates a cognitive and behavioral archetype profile based on your instinctive responses. This profile is provided for personal exploration and self-reflection only. It is not a clinical assessment, medical diagnosis, psychiatric evaluation, or a legally recognized measure of any kind. We make no representations regarding the clinical validity, medical accuracy, or predictive power of the results. Do not make consequential life decisions - including employment, healthcare, or relationship decisions - solely on the basis of your tra8me results.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending an email notification to the address associated with your account.

Your continued use of the Service following the posting of changes constitutes your acceptance of those changes. We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: