Privacy Policy

1. Overview

Deltrace is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have. By using Deltrace, you agree to the practices described here.

2. Information We Collect

We collect only what is necessary to provide the service:

• —Account information — email address and name, provided when you sign up.
• —Usage data — API call counts and timestamps, used to calculate usage and enforce plan limits.
• —Code chunks — your source files are parsed into chunks and stored to provide context injection. Chunks contain the relevant source text of functions, classes, and other semantic units. Compressed semantic representations replace raw text once processing completes.
• —API keys — stored as SHA-256 hashes. The plaintext key is shown once and never retained.

3. Deltrace API Keys and MCP Credentials

Deltrace API keys authenticate the CLI and MCP server. Server-side API keys are stored as SHA-256 hashes; the plaintext key is shown once during setup and is not retained by Deltrace. The local MCP client may store that key on your device so Claude Code or Codex can launch the Deltrace MCP server. Deltrace does not proxy Anthropic, OpenAI, or other model-provider API keys.

4. How We Use Your Information

• —To provide and operate the Deltrace service.
• —To authenticate your identity and secure your account.
• —To provide relevant code context through MCP when your agent requests it.
• —To contact you about early access, product updates, or support — only when you have opted in.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We use AWS to operate the service infrastructure. These providers process data only on our behalf and under our instructions.

6. Data Retention

We retain your data for as long as your account is active. You may delete your account at any time from the dashboard, which permanently removes all associated workspaces, repositories, chunks, and API keys.

7. Security

We use TLS encryption in transit, hashed API keys, and AWS RDS with TLS and certificate verification for storage. Access to production systems is restricted to authorised personnel only.

8. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at the email below. We will respond within 30 days.

9. Changes to This Policy

We may update this policy as the product evolves. We will notify registered users of material changes by email. The "Last updated" date at the top will always reflect the most recent revision.

10. Contact

Questions about this policy? Email us at team@deltrace.com.