Privacy and data use

TraceDome is an early-access product operated by Black Vale Technologies LLC. Its public website and fictional demo are separate from each signed-in user’s workspace. Demo edits stay in the current browser session and do not access customer accounts.

Your account and workspace

Google or Apple sign-in supplies a provider account identifier, email when available, and available display information. Apple refresh credentials needed for revocation are encrypted on the server. Server-managed sign-in cookies and stored session hashes keep your browser signed in to the correct workspace. Signing in does not grant access to your social accounts or Google Business Profile. Those connections require separate authorization. Other visitors cannot open your feedback, issues or connected accounts by signing into their own workspace.

If you link a previous ChatGPT-based workspace to a new sign-in method, its existing ownership identifier is retained. Workspaces are not merged simply because two accounts have the same email address. Manage available sign-in methods in your account settings.

What is stored

Feedback text, source identifiers, author display names, links, timestamps, classifications, issue assignments and connection status are stored for your workspace. Only submit feedback you are authorized to use, and remove secrets or unnecessary personal details. Connected-account credentials are encrypted on the server and never returned to the browser. Hosting and database services are provided through ChatGPT Sites and Cloudflare. Account sign-in communicates with Google or Apple; authorized business-account requests go to Meta or Google.

Google Business Profile reviews

When review access is available and you authorize a business account, TraceDome loads locations and original reviews only after you request them in Connections. Displayed reviews stay in the current view’s memory and are cleared when you leave Connections. Review text is not stored in TraceDome’s workspace database, sent for AI analysis, grouped into issues, or included in exports or weekly digests. Author names, ratings, review text and business responses may appear in that view. Access depends on Google API availability and your permissions; connecting does not guarantee that every location or review is available.

Paired iPhone devices

Pairing stores a device name, a hash of its scoped credential, and creation, expiry and last-used timestamps. One-time codes expire after five minutes. Device access expires after 30 days and can be revoked in Connect iPhone. The iPhone app saves its credential in the iOS Keychain and keeps loaded feedback in memory. The native app currently requires a private TestFlight invitation.

Analysis and coverage

This deployment currently uses rules-based analysis; live AI classification is not active. Labels identify customer reports, not verified incidents. Meta connections are limited to approved pilot accounts. Manual sync reads a bounded selection of recent comments from your authorized Facebook Pages and linked professional Instagram accounts. TraceDome does not crawl the entire platform, automatically reply or publish, or send automatic email alerts. Google reviews remain separate from feedback analysis.

Retention and deletion

Workspace records remain until you remove a source or delete workspace data; there is no automatic feedback-expiry schedule in this beta. Signing out does not delete saved records. Disconnecting a source removes its credentials and associated feedback. Export or clear workspace data in Settings. To delete your TraceDome account as well, open Sign-in methods → Delete account. Account deletion removes sign-in identities and sessions, erases workspace data, revokes paired devices, and requests revocation of Apple and Google business grants. If a provider cannot be reached, the deletion result tells you how to revoke that grant in the provider’s settings. Workspace deletion also revokes paired devices and removes the app’s active records and associated issue data. Hosting-provider operational records and backups have separate retention; this page does not promise immediate deletion of those copies. These controls do not delete comments from Facebook or Instagram.

Contact

For support, privacy questions or a data-removal request, contact norm@blackvaletechnologies.com. Do not email passwords, access tokens or sensitive feedback.