Privacy Policy

1. Introduction

TractionROS ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

We collect information you provide directly to us, such as when you:

• Sign in to a workspace or are invited to one (your email address, and your name if you give it)
• Purchase a plan
• Submit a contact form
• Upload a run-of-show schedule

This may include your name, email address, company name, and event details. Schedules are entered by the organization that owns the workspace and can include the names of people on its team.

3. Signing In, Sessions and Cookies

There are no passwords. To sign in, we email a one-time six digit code to your address. We keep only a scrambled (hashed) form of the code, it works once, and it expires after 10 minutes. After five wrong tries, sign-in for that address is paused for 15 minutes.

When you sign in we set one cookie, a session cookie, so you stay signed in. It is needed for the service to work, is only sent to the workspace address you signed in on, is not readable by scripts on the page, and is not used for advertising or tracking. We store only a scrambled form of its value. You are signed out after 12 hours without use, and never kept signed in for more than 30 days. Signing out ends the session straight away.

Our public website (tractionros.com) and our public demo use Google Analytics, which sets its own cookies to measure how they are used. The signed-in workspace screens do not use analytics.

4. How We Use Your Information

We use the information we collect to:

• Provide and improve our services
• Check that you are allowed into a workspace and keep it secure
• Respond to your inquiries and support requests
• Send transactional emails (sign-in codes, invitations, order confirmations, a reminder before a workspace's access ends)
• Comply with legal obligations

5. Network Addresses, Logs and Keeping Data

To limit abuse we use your network (IP) address, but we do not store it as is. It is stored only as a salted, one-way hash, in short-lived request limits and in our audit log, which records actions such as sign-ins, uploads, and changes to members and plans. The audit log is kept so we can investigate problems.

A workspace's schedule is replaced each time a new one is uploaded, and we keep no earlier versions. After a workspace's access ends, its schedule and members are kept so access can be restored, until we delete them. Demo data from our public demo is deleted after 24 hours. You can ask us to delete a workspace's data, or your own, at any time.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Each workspace's data is kept separate from every other workspace's.

7. Third-Party Services

We use third-party services to run TractionROS: Cloudflare for hosting, storage, and for the Turnstile check that tells people from automated traffic on the sign-in and contact forms; Resend for email delivery; Stripe for payments (we never see or store your card number); and Google Analytics on our public website. These services are bound by their own privacy policies. We do not share your data with third parties for marketing purposes.

8. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data. Please contact us at hello@tractionros.com to exercise these rights.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at hello@tractionros.com.