Privacy Policy

1. Operator

Operator: The Establish LLC (Service: Viewtrace)

Privacy contact: info@viewtrace.net

See also our Commercial Disclosure (Japan) for seller information.

2. Information we collect

We collect the following categories of information:

• Account data (email, authentication user ID, password hash, etc.)
• Optional profile data (name, company, phone, etc.)
• Service settings (URLs, regions, scheduled observation settings, notification preferences)
• Records we generate (screenshots, page titles, hashes, audit logs, etc.)
• Billing data via Stripe (subscription status, etc.; we do not store full card numbers)
• Contact form submissions (name, email, topic, message)
• Technical data (IP address, browser type, access logs, auth/diagnostic logs, cookies, locale)
• Analytics data via Google Analytics when you consent

3. How we use information

• Provide, maintain, and improve the Service
• Authenticate accounts, manage sessions, and remember preferences
• Run observations and scheduled observations; store results; send email notifications
• Bill subscriptions and manage plans
• Respond to support and contact requests
• Prevent abuse, secure the Service, and troubleshoot incidents
• Analyze usage (with consent) and improve quality
• Comply with law

4. Cookies & analytics

We use cookies for sign-in (Supabase Auth), locale (vt_locale), and analytics consent (viewtrace_ga_consent).

With your consent, we use Google Analytics (GA4) to understand site usage. You can accept or decline analytics cookies via the banner on first visit.

Vercel Analytics / Speed Insights may collect aggregated usage and performance metrics as part of hosting.

5. Service providers (processors)

We require or expect appropriate safeguards through contracts and vendor policies.

We use the following categories of providers (which may change):

• Supabase — authentication and database
• Vercel — hosting, blob storage, analytics
• Stripe — payments and subscriptions
• Browserless and similar — screenshot capture (built-in residential proxy when a region is selected)
• Google — Google Analytics when you consent
• Resend and similar — transactional and contact email

6. Disclosures to third parties

Payment processing (Stripe) and analytics (Google Analytics, with consent) are handled as necessary integrations or processing.

We do not sell personal information. We disclose information only:

• with your consent
• when required by law
• to protect life, safety, or property when consent is impractical
• to service providers listed above as needed to operate the Service

7. International transfers

Our infrastructure is primarily located outside Japan, including the United States. Your information may be stored and processed abroad.

We use contractual and organizational measures to reduce risks associated with cross-border processing.

8. Retention

• Screenshot records: per plan limits (e.g., Starter 7 days, Pro 60 days), then deleted
• Account data: while your account is active; deleted or anonymized within a reasonable time after closure or deletion request
• Billing records: as required by law and accounting needs
• Contact inquiries: for a reasonable period after resolution
• Technical and audit logs: as needed for security and incident response

9. Information inside screenshots

Pages you specify may contain third-party personal data, cookie banners, forms, ads, or other content.

We store captures to operate the Service but are not the data controller for content on target websites.

You are responsible for ensuring monitoring and sharing complies with law, your policies, and each site’s terms (see our Terms of Service).

See our Terms of Service.

10. Your rights

You may request access, correction, or deletion of your information by contacting us.

You can withdraw analytics consent via the site banner or browser settings.

California residents (CCPA/CPRA): we do not sell personal information. Contact info@viewtrace.net for access or deletion requests.

If you are in the EEA or UK, you may have additional rights under applicable law (access, rectification, erasure, restriction, portability, objection).

11. Children

The Service is not directed to children under 16 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.

12. Security

We use reasonable safeguards such as access controls and encrypted transport, but cannot guarantee absolute security.

If we become aware of a breach involving personal information, we will notify users and regulators as required by law.

13. Changes to this policy

We may update this policy and will post material changes on the Service or notify you by reasonable means.

Changes take effect when posted unless stated otherwise.