Trace Labs
Privacy Policy
Last updated: April 17, 2026
Trace ("Trace," "we," "us") helps businesses and creators tie revenue to the posts, shorts, videos, and campaigns that actually drive sales—especially when you sell through Whop and promote across social platforms. This policy explains what we collect, why we collect it, and the choices you have. It applies to our website (tracewhop.com), the Trace product, and related integrations (including Whop).
Who we are
Trace is operated by Trace Labs. Contact us on Whop (@ceoofitall).
What we collect
- Account & billing. Name, email, company name (if provided), plan, and payment-related metadata. Purchases may be processed by Whop and its payment partners—we receive what is needed to confirm entitlement and support your subscription.
- Whop & commerce data. When you connect Whop, we process information Whop makes available for the integration (for example products, checkouts, and sales events) so we can attribute revenue to marketing touchpoints you configure in Trace.
- Attribution & link analytics. Events such as link creation, clicks, referrers, UTM parameters, device/browser hints, timestamps, and derived metrics (for example conversion rates and revenue attributed to a post or link). We also store the labels and metadata you attach (campaign names, post titles, platform tags).
- Product & support usage. Log data, diagnostics, feature usage, and messages you send us (email, in-product chat if applicable).
- Website & cookies. Basic technical data from visitors (IP address, browser type, approximate location from IP, pages viewed) and cookies or similar technologies that keep sessions secure and measure site performance. You can control cookies through your browser.
How we use information
- Provide, secure, and improve Trace (including attribution reports).
- Authenticate users, enforce plan limits, and prevent abuse or fraud.
- Bill and administer subscriptions in line with Whop checkout where applicable.
- Communicate about the product, security, and policy updates.
- Comply with law and respond to lawful requests.
Visitors who click your Trace links
When you distribute smart links or tracking URLs generated in Trace, we may collect technical and engagement data from those clicks to attribute outcomes to your content. We do not use that data to advertise to your end customers on your behalf. You are responsible for your own disclosures to your audience where required (for example privacy notices on your site or app, or regional cookie rules).
How we share information
- Whop and other subprocessors that host infrastructure, email delivery, error monitoring, or analytics—only on instructions and with appropriate safeguards.
- Legal & safety: when required by law or to protect rights, users, or the public.
- Business transfers: if we are involved in a merger or acquisition, data may transfer as part of that transaction (we will notify you where required).
We do not sell personal information in the conventional sense (no data brokerage for third-party ad targeting).
Retention
We keep information as long as your account is active and as needed to provide the service, comply with law, resolve disputes, and enforce agreements. Aggregated or de-identified analytics may be retained longer.
Security
We use administrative, technical, and organizational measures designed to protect data. No method of transmission over the Internet is 100% secure; we work to reduce risk but cannot guarantee absolute security.
Your choices & rights
Depending on where you live, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. Contact us via the Whop link above. We may verify requests before responding. You may also lodge a complaint with your local data protection authority.
Regional privacy laws
Depending on where you live, local laws may give you extra rights or impose specific rules on us (for example access, deletion, correction, opt-out, or restrictions on certain uses of personal data). We do not rely on a single country's privacy regime as the only standard that applies to you. If a law in your region applies, we will honor lawful requests and requirements tied to that law. To exercise rights, reach us on Whop (@ceoofitall). Where we describe practices (such as not selling personal information for third-party ad targeting), we apply that commitment broadly, not only in one jurisdiction.
Where data is processed
We and our service providers may process information in any country where we operate infrastructure or where subprocessors are located. When cross-border transfers are restricted, we use safeguards required by the laws that apply to you.
Changes to this policy
We may update this policy from time to time. We will post the new version here and adjust the "Last updated" date. For material changes, we may provide additional notice (for example email or in-product message).
For terms of use, see our Terms of Service.