Last updated: 2026-08-31
Contact: [email protected]
The companies below process data for Trace under data-protection terms, limited to what their services require. Confirmed subprocessors are also listed at GET /api/v1/privacy/subprocessors. The hosting provider is still being selected and appears as a placeholder below.
Current subprocessors#
| Subprocessor | Purpose | Data processed | Location | Privacy policy |
|---|---|---|---|---|
| WorkOS (WorkOS, Inc.) | Identity, authentication, organizations, sessions, and multi-factor authentication | Name, email, username, password, date of birth, role, school membership | United States | https://workos.com/legal/privacy-policy |
| Stripe (Stripe, Inc.) | Subscription billing and payment processing, through hosted Stripe Checkout and the Customer Portal | Billing contact and payment details. Trace never receives or stores card numbers. | United States | https://stripe.com/privacy |
| OpenRouter | Routing prompts to the approved AI models | Prompt and response content, with the signed-in student's direct identifiers redacted, under a zero-retention instruction (data_collection: deny, zdr: true) on every request | United States | https://openrouter.ai/privacy |
| PostHog | Product analytics and session replay, both requiring consent and off by default | Account ID and role for identified users, page views, product events, web vitals, sent through Trace's server | United States (US cloud region) | https://posthog.com/privacy |
| Cal.com | Scheduling for meetings booked at /contact/meeting | Name, email, and booking details of the person booking | United States | https://cal.com/privacy |
| Slack (Salesforce) | Shared support and onboarding channels with schools | Email addresses invited to a channel, and the messages exchanged in it | United States | https://slack.com/trust/privacy/privacy-policy |
| Sentry (Functional Software, Inc.) | Backend error monitoring | Stack traces and operational metadata. No student content and no lesson or project content. | United States | https://sentry.io/privacy/ |
| Resend (Resend, Inc.) | Transactional email delivery: invitations, receipts, agreement PDFs, onboarding | Recipient email address, message subject and body, and any attached agreement PDF | United States | https://resend.com/legal/privacy-policy |
| [Hosting and database provider to be confirmed] | Running the application and storing its database | All stored data | [to be confirmed] | [to be confirmed] |
Model providers behind OpenRouter#
OpenRouter sends each request to the provider serving the selected model. Trace's approved models are developed by:
| Model | Developer |
|---|---|
Qwen3 ASR Flash (qwen/qwen3-asr-flash-2026-02-10, speech to text) | Alibaba |
DeepSeek V4 Flash (deepseek/deepseek-v4-flash-0731:nitro, the safety reviewer) | DeepSeek |
MiMo 2.5 (xiaomi/mimo-v2.5) | Xiaomi |
GPT-5.6 Luna (openai/gpt-5.6-luna, the default chat model) | OpenAI |
Kokoro 82M (hexgrad/kokoro-82m, text to speech) | Hexgrad |
Text Embedding 3 Small (openai/text-embedding-3-small, Trace SDK only) | OpenAI |
DeepSeek V4 Flash also reviews a redacted copy of every tutor message and final assistant reply for safety, regardless of the selected model.
Each model's page on openrouter.ai names the provider actually serving it and that provider's data policy. Some of these companies are headquartered outside the United States, which is addressed in §9 of the Data Processing Agreement and §9 of the Privacy Policy. A school with a residency requirement on inference can have the allowlist restricted for its deployment.
Commitments#
- Model providers receive content only after Trace's identifier-redaction pass, and only for models on the approved allowlist.
- Trace does not use student data to train, fine-tune, or improve any AI model, and instructs the router not to retain it or train on it.
- Trace does not sell student data and does not share it for cross-context behavioral advertising.
Change notification#
Trace updates this list when providers change and notifies schools of material additions or changes under §4 of the Data Processing Agreement, with a reasonable opportunity to object.
Prepared for review by qualified counsel before it is relied on in a specific jurisdiction.