ThreatTrace / Legal

Privacy Policy

Last updated: September 7, 2026

ThreatTrace helps people investigate suspicious email. This policy explains what information we collect, why we use it, and the choices available to you.

Information we collect

We collect account details such as your name, email address, username, and authentication provider. When you use an investigation, we process the email content, headers, links, attachments, and analysis results that you choose to provide or connect.

How we use information

We use this information to provide, secure, and improve ThreatTrace, authenticate your account, generate investigation reports, respond to support requests, and detect abuse. We do not sell personal information.

Connected mailboxes

When you connect Gmail or Outlook, ThreatTrace uses the permissions you grant to retrieve messages selected for analysis. You can revoke access from your provider at any time. We do not use connected mailbox access to send messages on your behalf.

Retention and security

We retain account and investigation information while it is needed to provide the service or meet legal obligations. We use access controls and reasonable technical safeguards, but no online service can guarantee absolute security.

Your choices

You may review or delete information through the product where those controls are available, revoke connected account access, or contact us about a privacy request. We may update this policy when our practices change.

Contact

Questions about privacy can be sent to the ThreatTrace team through the support channel associated with your account.