GDPR Compliance Statement
Last Updated: September 2026
1. Data Controller & Processor
Users act as Data Controllers for evidence they upload. TraceForge acts as a Data Processor.
2. Lawful Basis
TraceForge processes data under:
- Contractual necessity
- User consent
- Legitimate interest (security, fraud prevention)
3. Data Subject Rights
- Access
- Deletion
- Correction
- Export
4. International Transfers
Data may be stored in the United States. Supabase and Stripe provide appropriate safeguards.
5. Contact
privacy@tracedragon.com