Putrace ("we," "our," or "us") is a product of Maivenx. This Privacy Policy describes in full how we collect, use, store, disclose, and protect your personal information when you use our professional networking platform, including our website, mobile applications, and related services (collectively, the "Service"). Putrace is designed with privacy as the default — you control when and to whom you are visible.
1. Introduction and Scope
This Privacy Policy applies to all users of Putrace, including visitors to our website, waitlist signups, and registered account holders. It covers:
Information we collect and how we collect it
How we use and process your information
Legal bases for processing (where applicable under GDPR and similar laws)
Putrace is an intentional presence platform for professionals. You create temporary "traces" — time-bounded broadcasts of your availability in three modes:
HERE: Current location; uses Bluetooth Low Energy (BLE) for offline discovery at conferences, venues, or anywhere without internet.
THERE: Future travel; e.g., "In NYC next week, open to investors."
AVAILABLE: Ongoing availability; e.g., "YC alum, happy to advise."
Traces expire automatically. Discovery can work online or offline via BLE mesh. In BLE mode, device-to-device discovery and messaging may occur without central servers processing data in real time.
3. Information We Collect
3.1 Information You Provide
Account registration: Email address, name, password (hashed), phone number (if used for verification), and profile details such as professional title, company, bio, skills, and profile photo.
Trace content: The text, audience settings, scope, duration, and exclusions of traces you create. This data is ephemeral and deleted when traces expire.
Communications: Messages you send through Putrace, connection requests, and any content you submit in feedback or support requests.
Waitlist: If you sign up for our waitlist, we collect your email address and any optional information (e.g., role, company) you provide.
3.2 Information Collected Automatically
Device information: Device type, operating system, unique device identifiers, mobile carrier, and app version.
Usage data: Features used, discovery modes activated, time spent in the app, and interaction patterns.
Log data: IP address, browser type, referring/exit pages, and timestamps.
Approximate location: When you enable location-based features (e.g., "In my city" scope), we may collect city-level or approximate geographic data. We do not track precise location continuously.
3.3 Information from Third Parties
We may receive information from third-party authentication providers (e.g., Google, Apple) if you sign up or log in through them. We may also receive information from event organizers or partners when you register for events integrated with Putrace.
4. How We Use Your Information
We use your information for the following purposes:
Putrace is built with privacy principles at its core:
Default invisible: You have no presence until you put a trace. No trace = no discoverability.
Ephemeral data: Trace content expires and is permanently deleted. We do not retain expired trace content.
Audience control: You choose who can see each trace — by role, category, exclusions (e.g., block recruiters), company, or department.
BLE mode: In HERE mode with BLE, discovery and messaging can occur device-to-device. No central server processes that data in real time.
Encryption: We use industry-standard TLS for data in transit and encryption at rest for stored data.
Minimal data: We collect only what is necessary to provide the service.
6. Data Sharing and Disclosure
We do not sell your personal data. We may share your information in the following circumstances:
Other users: Only as you direct — e.g., when you put a trace visible to a certain audience, or when you send a connection request.
Service providers: We use third parties for infrastructure (e.g., Firebase, Google Cloud, hosting), analytics, email delivery, and support. These providers are contractually bound to protect your data and use it only for the services they provide to us.
Business transfers: If we merge, are acquired, or transfer assets, your information may be transferred as part of that transaction.
Legal compliance: When required by law, court order, or governmental authority; to enforce our terms; or to protect the rights, property, or safety of Putrace, our users, or the public.
7. Data Retention
Trace content: Deleted when traces expire. We do not retain trace content after expiration.
Account data: Retained until you delete your account or request deletion. After deletion, we may retain certain information as required by law or for legitimate purposes (e.g., fraud prevention).
Logs and analytics: Typically retained for up to 24 months, or as needed for security and debugging.
Marketing data: Retained until you unsubscribe or withdraw consent.
8. Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
Encryption in transit (TLS) and at rest
Access controls and authentication
Regular security assessments
Employee training on data protection
Incident response procedures
No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.
9. Data Breaches
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant supervisory authorities as required by applicable law (e.g., within 72 hours under GDPR).
10. Your Rights
Depending on your jurisdiction, you may have the following rights:
Access: Request a copy of your personal data.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data ("right to be forgotten").
Restriction: Request that we limit processing in certain circumstances.
Portability: Receive your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interests or for direct marketing.
Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
Lodge a complaint: File a complaint with your local data protection authority.
To exercise these rights, contact us at info@maivenx.com. We will respond within the timeframes required by applicable law (e.g., 30 days under CCPA, one month under GDPR).
11. Cookies and Tracking Technologies
Our website may use cookies, web beacons, and similar technologies for:
Essential cookies: Required for the website to function (e.g., session management).
Analytics cookies: To understand how visitors use our site and improve it.
Preference cookies: To remember your settings.
You can control cookies through your browser settings. Disabling certain cookies may affect site functionality. We do not use third-party advertising cookies or sell data for ad targeting.
12. International Data Transfers
Putrace and Maivenx may process data in jurisdictions outside your residence. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:
Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions by relevant authorities
Other mechanisms permitted under applicable law
13. Children's Privacy
Putrace is not intended for users under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will delete it.
14. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights:
Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to delete: Request deletion of your personal information, subject to exceptions.
Right to opt out of sale: We do not sell personal information. If that changes, we will provide an opt-out.
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
If you are in the European Economic Area (EEA), UK, or Switzerland, you have rights under the General Data Protection Regulation, including those listed in Section 10. Our legal bases for processing are set out in Section 4. You also have the right to lodge a complaint with your supervisory authority.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email (for account holders) or a prominent notice on our website or in the app. We will also update the "Last updated" date. Your continued use after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
17. Contact Us
Putrace / Maivenx
For privacy-related inquiries, data subject requests, or complaints:
Email: info@maivenx.com