Privacy Policy

EchoTrail Ventures, Ltd. (“EchoTrail”, “we”) runs EchoTrail Insights: the API and MCP server, the Dataset license, the process pages on this site, and the free Rocky demo. This policy says what we collect, what we do with it, and what we never collect.

• Account information. When you sign in, our authentication provider, Clerk, gives us your email address and name. We use them to run your account and to contact you about it.
• API usage. For each request we record the API key used, request counts, the process names, hashes, and paths you looked up, and timestamps. We use this for billing and limits, to prevent abuse, and to improve coverage: a process name we do not have yet goes into the queue for our behavior lab.
• Site analytics. We run our own first-party analytics on this site: pages viewed, referrer, browser and device type, and a first-party visitor id. There are no third-party trackers and no ad networks.
• Payments. Stripe handles payment. Stripe sends us your subscription status and the last four digits of the card; we never see or store card numbers.
• Rocky demo prompts. Questions you ask the free Rocky demo are stored with the answers. We may review them to improve the data and the answers. Do not put secrets or personal data into a prompt.
• Messages you send us. Contact and dataset request forms, and email, are kept so we can reply.

We collect no endpoint telemetry from customers and no data about your environment. The behavioral data in EchoTrail Insights comes from our own lab, where we install and run software on machines we control, and from aggregated historical execution data. Nothing in the product identifies a customer machine, user, or organization.

Account information stays for as long as you have an account. API usage records are kept for billing and abuse prevention for 24 months, and queried process names are kept as part of the coverage queue. Site analytics are kept in aggregate. Rocky demo prompts are kept for 12 months. When you delete your account, we delete your account information and API keys and keep only what billing and legal records require.

We use three processors: Clerk (sign-in), Stripe (payments), and Amazon Web Services (hosting, in the United States). Each sees only what it needs for its job. We do not sell personal data, and we do not share it with anyone else except when the law requires it.

API keys are stored as hashes; we cannot read them back. Data moves over TLS and is stored in access-controlled AWS infrastructure. If we learn of a breach affecting your data, we will tell you.

You can see the information tied to your account in your account settings, and you can ask us for a copy, a correction, or deletion at any time by emailing info@echotrail.io. We answer within 30 days.

We set session cookies so you stay signed in, and a first-party cookie for our own analytics. Neither is used for cross-site tracking or advertising.

The services are for professionals and are not directed at children under 16. We do not knowingly collect personal data from them; if you believe we have, contact us and we will delete it.

We may update this policy. The date at the top changes when we do, and material changes are sent to account holders by email before they take effect.

EchoTrail Ventures, Ltd.
11786 Shaffer Pl., Unit S-209
Littleton, CO 80127
info@echotrail.io

Our Terms of Service cover how the services may be used.