Privacy Policy

1. Introduction

VantaTrace ("we", "us", or "our") operates the VantaTrace exception tracking and telemetry platform. We are committed to protecting the privacy of your personal data and the telemetry logs ingested from your microservices. This Privacy Policy details how we collect, process, secure, and share information when you use our website, SaaS platform, or client SDK.

2. Data We Collect

When utilizing VantaTrace, we collect several categories of information depending on your account type and SDK deployment:

• Account Information: Name, work email address, credentials, and configuration settings provided during registration.
• Billing Information: Stripe-processed payment receipts, subscription states, and historical transaction IDs. We do not store full credit card details on our servers.
• Telemetry & Error Logs (via SDK): Stack traces, error severity levels, request headers, client IP addresses, host platform specifications (CPU load, memory load, architecture, OS specs), and custom enumerable exception properties.

3. Telemetry Ingestion and Redaction

By default, the `@vantatrace/sdk` client automatically redacts sensitive parameter values and HTTP request headers on the client side before they are transmitted to our ingestion servers. Redacted keys include: password, token, authorization, cookie, and x-api-key.

You remain responsible for ensuring that you do not intentionally send unredacted personally identifiable information (PII) or protected health information (PHI) through custom exception metadata properties.

4. How We Use Your Data

We process your data strictly to fulfill the following operational purposes:

• Provide, maintain, and secure the VantaTrace error tracking dashboard and ingestion API.
• Aggregate identical runtime exceptions to group diagnostic issues under unique fingerprints.
• Verify compliance with monthly subscription limit thresholds.
• Send critical system notifications, security advisories, and transactional updates.

5. Data Security

We implement industry-standard administrative, physical, and technical controls to safeguard telemetry data and account credentials against unauthorized access, alterations, or destruction. All data in transit is encrypted using Transport Layer Security (TLS), and databases are shielded via strict firewall and Redis cache access layers.

6. Contact Us

If you have any questions regarding this Privacy Policy or VantaTrace's data handling practices, please contact us directly at our Contact Page.