Privacy policy

This policy explains what personal data Trau and trau.sh collect, why, and what you can do about it. The controller is Codesome Labs, MB (“Codesomelabs”, “we”), company code 305818239, registered at Erfurto g. 44-69, LT-04100 Vilnius, Lithuania. You can reach us at hello@codesomelabs.com.

What we collect

Trau is self-hosted: your code, tickets, prompts and run history stay on your machines, and we do not receive them. We collect only what we need to run trials, licenses and billing:

• -Your email address, when you start a trial. We mail a 6-digit code to confirm it, then use the address for your license, your license key and messages about your subscription.
• -Your IP address, when you ask for a confirmation code. We use it only to limit how many codes one address can request, and delete it within 2 days.
• -An install identifier, a random ID Trau creates on each machine. It ties an install to your trial or license, which is how we keep to one trial per install and 2 installs per license, and how you release a machine.
• -Billing data, when you subscribe. Stripe collects your payment details directly. We receive your name, email address, billing address and country, a VAT number if you give one, and the history of your payments and invoices. We never see your full card number.
• -Visits to trau.sh, counted by Vercel Web Analytics.

Why, and on what legal basis

• -To run your trial, license and subscription: the contract between us (GDPR Article 6(1)(b)).
• -To issue invoices and keep accounting records: our legal obligations under Lithuanian tax and accounting law (Article 6(1)(c)).
• -To prevent abuse of the free trial and the install limit, and to understand how trau.sh is used: our legitimate interests (Article 6(1)(f)).
• -To answer your email: our legitimate interest in helping you, or the contract when you are a customer.

We do not sell your data and do not use it for advertising.

Who processes it for us

• -Stripe: payments, subscriptions, invoices, and the customer portal that Manage subscription opens.
• -Resend: sends our email, including confirmation codes, license keys and subscription notices.
• -Vercel: hosts trau.sh and runs Vercel Web Analytics on it.
• -Cloudflare: hosts the service that runs trials and licenses, and stores trial, license and install records.

Some of these providers are based outside the European Economic Area. Where data leaves it, the transfer relies on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

• -Trial, license and install records: while your trial or license is active, and for 12 months after it ends.
• -The IP address behind a confirmation-code request: 2 days.
• -Billing records and invoices: for as long as Lithuanian tax and accounting law requires.
• -Email you send us: for as long as we need it to answer you and follow up.

Your rights

Under the GDPR you have the right to:

• -access the personal data we hold about you and get a copy of it
• -have it corrected when it is wrong
• -have it erased when we no longer need it, except billing records the law requires us to keep
• -restrict or object to how we use it, including processing based on our legitimate interests
• -receive it in a portable, machine-readable format
• -complain to a supervisory authority: in Lithuania, the State Data Protection Inspectorate, or the authority in the EU country where you live or work

To use any of these rights, email hello@codesomelabs.com from the address your trial or license is under. We answer within one month.

Changes to this policy

If we change this policy in a way that affects you, we tell you by email or in the app before the change applies. The effective date on this page shows the current version.

Contact

Questions about your data go to hello@codesomelabs.com. The controller is Codesome Labs, MB, Erfurto g. 44-69, LT-04100 Vilnius, Lithuania.