Tracecat

AgentsCasesWorkflowsThe open source AI automation platform for security teams and agents.Tracecat is the all-in-one security automation platform built for the AI era.Book a demoSign up free/WorkspaceCreate sessionInboxWorkspaceWorkflowsCasesAgentsToolsTablesMembersVariablesConnectionsReview required 2Isolate Gmail account from Slack requestnowAwaiting approvalInvestigate Q4 metrics2mFound 3 anomaliesIn progress 1Handle IT request5mIT Requests · Processing...Completed 2Customer: API rate limits15mResolvedDraft weekly report1hReport generatedIsolate Gmail account from Slack requestTriggerSlack requestLookup Gmail accountgmail.find_userIsolate Gmail accountgmail.isolate⌘N⌘YIsolate Gmail account given Slack requestAnalyzing request...• What Slack signal should trigger the workflow?• Which Gmail account fields are required for isolation?I can wire this to a Slack request and then isolate the matching Gmail account. Which Slack request type should trigger this?Security request: Isolate Gmail accountSearching integrations...Slack (OAuth connected)Gmail (OAuth connected)I found a single action for this request: Isolate Gmail account. It will disable the account and revoke active sessions.Building workflow...Trigger: Slack request receivedLookup Gmail account by emailIsolate Gmail accountReady to add the Isolate Gmail account action to your workflow.Approve actionRejectTrusted by builders in mission-critical environmentsTurn simple prompts into secure and scalable AI automations.Learn about Automations in Tracecat →Enterprise integrationsOver 200 connectors for security, IT, and infrastructure tools.Sandboxed by defaultAll actions and agents are run in a sandbox, isolated from secrets.Limitless control flowRun loops, if-conditions, parallel subflows, and scripts (Python, Bash, Javascript).Human-in-the-loop agentsRun agents in workflows with explicit tool approvals.EventsEvenInputInpuResultResuTrigger typeWebhookStatusCompletedScheduled3/25/2026, 7:26:24 PMStart time3/25/2026, 7:26:24 PMEnd time3/25/2026, 7:26:24 PMEventsTriggerScatterIAM analyst agent Notify userIsolate userApproval requiredSaaS drift remediationDrag to panTriggerSaaS drift alert@alert.type == 'iam'@alert.type == 'other'ScatterSplit by accountClose alertNo drift foundFor loopIAM analyst agentAI AgentIsolate userIsolate deviceNotify ownerRun subflowAccess quarantineBuild agents that work with your analysts.Learn about Cases in Tracecat →CasesCASE-234966Created 1 month agoLast edited 3 days agoStatusIn progressPriority: HighAssignee: UnassignedTTA 12mTTR 4h 32mSeverity: Highphishingcredential compromisemarketingemail gatewayPhishing attack with successful credential compromise - marketing department userMFA enforcedYesImpact scopeSingle userData exfiltrationUnknownContainment completeNoEmployee sarah.chen@company.com reported a suspicious email impersonating IT requesting a password verification. The phishing email compromised corporate credentials and enabled lateral movement attempts.Detection detailsUser report at 09:42 UTC, gateway alert at 12:15 UTC2.5 hour detection delayInitial access via spoofed domain email linkIndicators of compromiseSender: itsupport@company-verify.netReply-to: support.verify@protonmail.comLogin IP: 185.220.101.45 (Tor exit node)Recommended actions: reset credentials, revoke sessions, and run targeted mailbox audit for related phishing campaigns.Case copilotReadySummary drafted from the case description.Suggested next stepsDisable compromised IAM and corporate email accountsRun mailbox search for the spoofed senderCheck for lateral movement attemptsCan you generate a timeline and recommend containment steps?I can generate a timeline and pre-fill containment actions based on the IOC list.Create timelineDraft containment planNotify stakeholdersAsk the copilot for containment guidance...The best way to productionize agents.Learn about Agents in Tracecat →Build agents through chatRunbooks/Incident response agentIncident response agentOpus 4.5SIEMLog searchAsset inventoryOn-callAdd integrationGoalTriage security alerts, enrich with context, and recommend containment steps.Instructions1. Pull related alerts from SIEM and on-call logs.2. Correlate with auth and network telemetry.3. Propose containment and rollback steps.Use agents to resolve casesSRE AssistantIncident 421Latency spiked on the payments API after the latest deploy.Analyzing incident...Detected p95 regression in us-east-1Rollout window aligns with spikeI recommend pausing the rollout and checking the new cache invalidation path.Compare latency before/after release `v2.7.1`Inspect DB connection pool saturationCan you draft a rollback checklist and page the on-call?Drafting now. I’ll also pull the last successful deploy notes and summarize impact.Rollback to `v2.7.0` in us-east-1Verify error budget burn rate normalizationGive agents data securelyTablesincidentsSRE • incident timelineActivealertsInfra • paging historyActiveaccess_reviewsSecurity • quarterly auditsActivechange_requestsIT • approvals and rollbacksActiveTracecat is mission ready.Learn about the Enterprise Edition →Fine-grained access controlsOpen source audit logsSelf-hostable anywhereSandboxed by defaultSOC2 Type IISLAsReserved compute and autoscalingGit sync for workflowsBring-your-own-LLMsBuild for freeSign up to TracecatEmailContinueBy signing up, you accept our Terms of Use and confirm that you have taken note of our Privacy Policy.Already have an account? Sign inTrusted by security teams building with AICNLRER+3@marty"There are other "agent builder" solutions but none quite as elegant and useful as what we get with Tracecat!"@anon"Just worked on an incident using case chat and it felt magical. I love how easy it's going to make end user communication"@keyboard_warrior"Literally such a goated platform and I love that is more than just a workflow builder definitely a more than worthy competitor to N8N" --- Open SourceSelf-hosted deployment with full controlFree foreverUnlimited workflows and case managementOut-of-the-box integrations and lookup tablesDeploy with Docker or AWS FargateSSO and audit trails includedDiscord community and GitHub issues-Advanced case management-Advanced agents-Enterprise controls and monitoringDeploy nowHosted CloudManaged hosting to get started quicklyCustomCore workflows, integrations, and case management100k executions per month1 workspaceUp to 10 usersSSO and audit logs includedDiscord community and GitHub issues-Advanced case management-Advanced agents-Git syncStart trialEnterpriseCloud or self-hostedCustom1M executions per monthUp to 100 usersUnlimited workspacesAdvanced case management and advanced agents24/7 Slack, priority email, and a dedicated support engineerBook a demoCompare plansCompare product capabilities, deployment options, limits, and support across licenses.FeaturesOpen SourceHosted CloudEnterpriseWorkflowsUnlimited workflowsWebhooksSchedulesGit sync--AgentsAI actionAI agent actionAgent builder--Preset agents--Versioned prompts--Subagents--Memory--Sandboxed MCP--Tool HiTL approvals--Agent monitoring--CasesCase managementCommentsAttachmentsLinked tablesCustom fieldsCase metrics--Case triggers--Custom dropdowns--IntegrationsPrebuilt integrationsLookup tablesCustom registryDeploymentManaged cloud-Self-hosted-Docker-AWS Fargate-Kubernetes--SecuritySSOAudit logsRBAC--UsageMonthly executionsSelf-managed100k/mo1M/moUsersSelf-managed10100WorkspacesSelf-managed1UnlimitedSupportDiscord communityGitHub issues24/7 Slack--Priority email--Dedicated support engineer--Custom training--Hosted Cloud includes up to 100k workflow and agent executions per month. Enterprise includes up to 1M per month. Higher-volume managed or self-hosted deployments require a custom agreement. --- These Terms of Service constitute a legally binding agreement between you and IndexHub, Inc. (together with its affiliates, "Tracecat", "we," "our" or "us") governing your use of our products, services, website (the "Site" and collectively with the foregoing, the "Services").YOU ACKNOWLEDGE AND AGREE THAT, BY CLICKING ON THE "I AGREE" OR SIMILAR BUTTON, REGISTERING FOR AN ACCOUNT, ACCESSING OR USING THE SERVICES, YOU ARE INDICATING THAT YOU HAVE READ, UNDERSTAND AND AGREE TO BE BOUND BY THESE TERMS OF SERVICE, WHETHER OR NOT YOU HAVE REGISTERED WITH THE SITE OR THE APP. IF YOU DO NOT AGREE TO THESE TERMS OF SERVICE, THEN YOU HAVE NO RIGHT TO ACCESS OR USE THE SERVICES.These Terms of Service are effective as of the date you first click "I agree" (or similar button or checkbox) or use or access the Services, whichever is earlier. If you accept or agree to these Terms of Service on behalf of your employer or another legal entity, you represent and warrant that (i) you have full legal authority to bind your employer or such entity to these Terms of Services; (ii) you have read and understand these Terms of Service; and (iii) you agree to these Terms of Service on behalf of the party that you represent. In such event, "you" and "your" will refer and apply to your employer or such other legal entity.Any personal data you submit to us or which we collect about you is governed by our Privacy Policy ("Privacy Policy"), available at Privacy Policy. You acknowledge that by using the Services, you have reviewed the Privacy Policy. The Privacy Policy is incorporated by reference into these Terms of Service and together form and are hereinafter referred to as this "Agreement."PLEASE NOTE: THIS AGREEMENT GOVERNS HOW DISPUTES BETWEEN YOU AND TRACECAT CAN BE RESOLVED. IT CONTAINS A BINDING AND FINAL ARBITRATION PROVISION AND CLASS ACTION WAIVER (SECTION 14). PLEASE READ CAREFULLY AS IT AFFECTS YOUR LEGAL RIGHTS, INCLUDING, IF APPLICABLE, YOUR RIGHT TO OPT OUT OF ARBITRATION.Our ServicesWelcome to Tracecat. Tracecat is an open-core workflow automation and case management platform for security teams. Security teams use Tracecat's click-and-drag builder and AI case management features to orchestrate security alerts and automate investigations.1. Account, Password, SecurityYou must register with Tracecat and create an account to use the Services (an "Account") and as part of that process you will be requested to provide certain information, including without limitation your name, full address, phone number and email address.By using the Services, you agree to provide true, accurate, current and complete information as prompted by the registration process and to maintain and promptly update the Account information to keep it accurate, current and complete.You are the sole authorized user of your Account. You are responsible for maintaining the confidentiality of any log-in, password, and Account number provided by you or given to you by Tracecat for accessing the Services.You are solely and fully responsible for all activities that occur under your password or Account, even if not authorized by you. Tracecat has no control over the use of any user's Account and expressly disclaims any liability derived therefrom.Should you suspect that any unauthorized party may be using your password or Account or you suspect any other breach of security, you agree to contact Tracecat immediately.The person signing up for the Services will be the contracting party ("Account Owner") for the purposes of these Terms of Service. Your Account is not transferable to any other person or account. You must immediately notify us of any unauthorized use of your password or identification or any other breach or threatened breach of our security.2. Billing and PaymentTracecat invoices fees in accordance with the applicable Order Form or SOW. Subscription fees are invoiced in advance; usage/overage and services or approved expenses are invoiced in arrears. Invoices are due net 30 days from the invoice date and payable by ACH or wire transfer to the remit details on the invoice (or another method expressly agreed in writing).3. User Generated Content"User Generated Content" is defined as any content, information, and materials that may be textual, audio, or visual that you provide, submit, upload, publish, or make otherwise available to the Services and our users.You are solely responsible for User Generated Content, and we act merely as a passive conduit for your online distribution and publication of your User Generated Content.You acknowledge and agree that Tracecat:Is not involved in the creation or development of User Generated ContentDisclaims any responsibility for User Generated ContentCannot be liable for claims arising out of or relating to User Generated ContentIs not obligated to monitor, review, or remove User Generated Content, but reserves the right to limit or remove User Generated Content at its sole discretionYou represent and warrant that your User Generated Content:Will not be false, inaccurate, incomplete or misleadingWill not infringe on any third party's intellectual property rights or rights of publicity, personality or privacyWill not violate any law, statute, ordinance, or regulationWill not be defamatory, libelous, unlawfully threatening, or unlawfully harassingWill not be obscene or contain pornography or be harmful to minorsWill not contain any viruses, Trojan Horses, worms, or other malicious codeWill not represent you being employed by or affiliated with TracecatWill not create liability for TracecatBy making available any User Generated Content through the Services, you hereby grant to Tracecat a worldwide, irrevocable, perpetual, non-exclusive, transferable, royalty-free license, with the right to sublicense, to use, access, view, copy, adapt, modify, distribute, license, sell, transfer, publicly display, publicly perform, transmit, stream, broadcast and otherwise exploit such User Generated Content on, through or by means of the Services.4. Representations and WarrantiesYou represent and warrant that:You are 18 years of age or older or are at least of the legally required age in your jurisdictionYou are capable of entering into binding contractsYou have the right, authority and capacity to enter into this Agreement and abide by its termsWhere you enter into this Agreement on behalf of a company or other organization, you have authority to act on behalf of that entity and bind it to this AgreementYou further represent and warrant that:You have read, understand, and agree to be bound by these Terms of Service and the Privacy PolicyYou will act professionally and responsibly in your interactions with other usersYou will act in accordance with any applicable local, state, or federal law or custom and in good faithYou agree not to engage in prohibited activities including:Copying, distributing, or disclosing any part of the Services in any medium other than as allowedUsing any automated system to access the ServicesTransmitting spam, chain letters, or attempting to phish or scrapeAttempting to interfere with or compromise system integrity or securityViolating any international, federal, provincial or state regulationsUploading invalid data, viruses, worms, or other software agentsInfringing upon intellectual property rightsImpersonating another person or conducting fraudHarassing, insulting, harming, or threatening other users or staffAttempting to decipher, decompile, or reverse engineer any softwareBypassing security features or measuresAttempting to access unauthorized Accounts or collect personal information5. Termination and SuspensionUnless otherwise agreed to in writing between you and Tracecat, either party may terminate these Terms of Service for any or no cause, at any time.You may cancel and delete your Account at any time by either using the features on the Services to do so (if applicable and available) or by written notice to privacy@tracecat.com.After cancellation, you will no longer have access to your Account, your profile or any other information through the Services. The provisions of these Terms of Service which by their intent or meaning intended to survive such termination shall continue to apply indefinitely.We reserve the right to refuse the Services to anyone for any reason at any time. Tracecat may terminate or limit your right to use the Services in the event that we are investigating or believe that you have breached any provision of this Agreement.If Tracecat terminates or limits your right to use the Services, you are prohibited from registering and creating a new Account under your name, a fake or borrowed name, or the name of any third party.Tracecat reserves the right to modify or discontinue, temporarily or permanently, all or any portion of the Services at its sole discretion. Tracecat is not liable to you for any modification or discontinuance.Following termination or cancellation of your Account, we reserve the right to delete all your data, including any User Generated Content, in the normal course of operation. Your data cannot be recovered once your Account is terminated or cancelled.6. Links to Third-Party WebsitesThe Services may contain links (such as hyperlinks) to third-party websites. Such links do not constitute endorsement by Tracecat or association with those websites, their content or their operators.Such links are provided as an information service, for reference and convenience only. Tracecat does not control any such websites, and is not responsible for their availability, accuracy, content, advertising, products, or services.It is your responsibility to evaluate the content and usefulness of the information obtained from other websites. You acknowledge and agree that Tracecat is not involved in the creation or development of third-party websites and disclaims any responsibility for them.The use of any website controlled, owned or operated by third parties is governed by the terms and conditions of use and privacy policies for those websites. You access such third-party websites at your own risk.As part of the functionality of the Services, you may link your Account with online accounts you may have with third-party service providers (each such account, a "Third-Party Account"). You represent that you are entitled to disclose your Third-Party Account login information to Tracecat and/or grant Tracecat access to your Third-Party Account without breach of any terms.PLEASE NOTE THAT YOUR RELATIONSHIP WITH THE THIRD-PARTY PROVIDERS ASSOCIATED WITH YOUR THIRD-PARTY ACCOUNTS IS GOVERNED SOLELY BY YOUR AGREEMENT(S) WITH SUCH THIRD PARTY PROVIDERS.7. Intellectual Property RightsAll text, graphics, editorial content, data, formatting, graphs, designs, HTML, look and feel, photographs, music, sounds, images, software, videos, designs, trademarks, logos, typefaces and other content (collectively "Proprietary Material") that users see or read through the Services is owned by Tracecat, excluding User Generated Content.Proprietary Material is protected in all forms, media and technologies now known or hereinafter developed. Tracecat owns all Proprietary Material, as well as the coordination, selection, arrangement and enhancement of such Proprietary Materials as a Collective Work under the United States Copyright Act.You may not copy, download, use, redesign, reconfigure, or retransmit anything from the Services without Tracecat's express prior written consent.The service marks and trademarks of Tracecat, including without limitation Tracecat and Tracecat logos, are service marks owned by Tracecat. Any other trademarks, service marks, logos and/or trade names appearing via the Services are the property of their respective owners.You may choose to or we may invite you to submit comments, ideas, or feedback about the Services ("Feedback"). By submitting any Feedback, you agree that your disclosure is gratuitous, unsolicited, and without restriction and will not place Tracecat under any fiduciary or other obligation, and that we are free to use the Feedback without any additional compensation to you.You acknowledge that all email and other correspondence that you submit to us shall become our sole and exclusive property.8. Confidential InformationYou acknowledge that Confidential Information is a valuable, special and unique asset of Tracecat and agree that you will not disclose, transfer, use (or seek to induce others to disclose, transfer or use) any Confidential Information for any purpose other than using the Services in accordance with these Terms of Service.If relevant, you may disclose the Confidential Information to your authorized employees and agents provided that they are also bound to maintain the confidentiality of Confidential Information.You shall promptly notify Tracecat in writing of any circumstances that may constitute unauthorized disclosure, transfer, or use of Confidential Information. You shall use best efforts to protect Confidential Information from unauthorized disclosure, transfer or use.The term "Confidential Information" shall mean any and all of Tracecat's trade secrets, confidential and proprietary information, and all other information and data of Tracecat that is not generally known to the public or other third parties who could derive value from its use or disclosure.Confidential Information shall be deemed to include technical data, know-how, research, product plans, products, services, customers, markets, software, developments, inventions, processes, formulas, technology, designs, drawings, engineering, hardware configuration information, marketing, finances, strategic and other proprietary information relating to Tracecat or Tracecat's business, operations or properties.You shall return all originals and any copies of any and all materials containing Confidential Information to Tracecat upon termination of this Agreement for any reason whatsoever.9. Disclaimer of WarrantiesTHE SERVICES IS PROVIDED ON AN "AS IS" BASIS WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OR CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.TRACECAT MAKES NO WARRANTIES OR REPRESENTATIONS ABOUT THE ACCURACY OR COMPLETENESS OF THE CONTENT PROVIDED THROUGH THE SERVICES OR THE CONTENT OF ANY SITES LINKED TO THE SERVICES AND ASSUMES NO LIABILITY OR RESPONSIBILITY IN CONTRACT, WARRANTY OR IN TORT FOR ANY (I) ERRORS, MISTAKES, OR INACCURACIES OF CONTENT, (II) PERSONAL INJURY OR PROPERTY DAMAGE, OF ANY NATURE WHATSOEVER, RESULTING FROM YOUR ACCESS TO AND USE OF THE SERVICES, (III) ANY ACCESS TO OR USE OF OUR SECURE SERVERS AND/OR ANY AND ALL PERSONAL INFORMATION AND/OR FINANCIAL INFORMATION STORED THEREIN; AND (IV) EVENTS BEYOND OUR REASONABLE CONTROL.UNDER NO CIRCUMSTANCES WILL TRACECAT AND AFFILIATES OR THEIR CORPORATE PARTNERS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, ACTUAL, CONSEQUENTIAL, ECONOMIC, SPECIAL OR EXEMPLARY DAMAGES ARISING IN CONNECTION WITH YOUR USE OF OR INABILITY TO USE THE SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF THE SAME.SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU IN THEIR ENTIRETY.IF, NOTWITHSTANDING THE FOREGOING EXCLUSIONS, IT IS DETERMINED THAT TRACECAT IS LIABLE FOR DAMAGES, IN NO EVENT WILL THE AGGREGATE LIABILITY EXCEED THE LOWER OF (I) THE TOTAL FEES PAID BY YOU TO TRACECAT DURING THE SIX MONTHS PRIOR TO THE TIME SUCH CLAIM AROSE OR (II) ONE HUNDRED DOLLARS ($100).10. IndemnificationYou hereby agree to indemnify, defend, and hold harmless Tracecat and its officers, directors, employees, agents, attorneys, insurers, successors and assigns (the "Indemnified Parties") from and against any and all Liabilities incurred in connection with (i) your use or inability to use the Services, or (ii) your breach or violation of this Agreement; (iii) your violation of any law, or the rights of any user or third party and (iv) any content submitted by you or using your Account to the Services, including, but not limited to the extent such content may infringe on the intellectual rights of a third party or otherwise be illegal or unlawful.You also agree to indemnify the Indemnified Parties for any Liabilities resulting from your use of software robots, spiders, crawlers, or similar data gathering and extraction tools, or any other action you take that imposes an unreasonable burden or loan on our infrastructure.Tracecat reserves the right, in its own sole discretion, to assume the exclusive defense and control at its own expense of any matter otherwise subject to your indemnification. You will not, in any event, settle any claim or matter without the prior written consent of Tracecat.11. Dispute Resolution – Arbitration & Class Action WaiverPLEASE READ THIS SECTION CAREFULLY — IT AFFECTS YOUR LEGAL RIGHTS AND GOVERNS HOW YOU AND TRACECAT CAN BRING CLAIMS AGAINST EACH OTHER.You agree that, in the event any dispute or claim arises out of or relating to your use of the Services, you will contact us at privacy@tracecat.com and you and Tracecat will attempt in good faith to negotiate a written resolution of the matter directly.You agree that if the matter remains unresolved for 30 days after notification (via certified mail or personal delivery), such matter will be deemed a "Dispute."Binding ArbitrationYou and Tracecat agree that any dispute, claim or controversy arising out of or relating to this Agreement or to your use of the Services (collectively "Disputes") will be settled by binding arbitration, except that each party retains the right to seek injunctive or other equitable relief in a court of competent jurisdiction to prevent the actual or threatened infringement of intellectual property rights.This means that you and Tracecat both agree to waive the right to a trial by jury. You may bring a claim against Tracecat in "small claims" court, instead of by arbitration, but only if the claim is eligible and brought on an individual, non-class basis.Class Action WaiverYou and Tracecat agree that any proceedings to resolve Disputes will be conducted on an individual basis and not in a class, consolidated, or representative action. This means that you and Tracecat both agree to waive the right to participate as a plaintiff as a class member in any class action proceeding.Arbitration Administration and RulesThe arbitration will be administered by the American Arbitration Association ("AAA") in accordance with the Commercial Arbitration Rules and the Supplementary Procedures for Consumer Related Disputes then in effect, except as modified by this section.Arbitration Location and ProcedureUnless you and Tracecat agree otherwise, the seat of the arbitration shall be in San Francisco, California. If your claim does not exceed USD$10,000, then the arbitration will be conducted solely on the basis of documents, unless you request a hearing.Arbitrator's Decision and Governing LawThe arbitrator shall apply California law consistent with the Federal Arbitration Act and applicable statutes of limitations, and shall honor claims of privilege recognized by law. Judgment on the arbitration may be entered in any court having jurisdiction thereof.12. Governing LawExcept as provided in Section 11 or expressly provided in writing otherwise, this Agreement and your use of the Services will be governed by, and will be construed under, the laws of the State of California, without regard to choice of law principles. This choice of law provision is only intended to specify the use of California law to interpret this Agreement.13. No Agency; No EmploymentNo agency, partnership, joint venture, employer-employee or franchiser-franchisee relationship is intended or created by this Agreement.14. General ProvisionsFailure by Tracecat to enforce any provision(s) of this Agreement will not be construed as a waiver of any provision or right.This Agreement constitutes the complete and exclusive agreement between you and Tracecat with respect to its subject matter, and supersedes and governs any and all prior agreements or communications.The provisions of this Agreement are intended to be interpreted in a manner which makes them valid, legal, and enforceable. Except for the "Class Action Waiver" in Section 11, in the event any provision is found to be partially or wholly invalid, illegal or unenforceable, such provision shall be modified or restructured to the extent necessary to render it valid, legal, and enforceable.This Agreement may not be assigned or transferred by you without our prior written approval. We may assign or transfer this Agreement without your consent, including but not limited to assignments: (1) to a parent or subsidiary, (2) to an acquirer of assets, or (3) to any other successor or acquirer.Any assignment in violation of this section shall be null and void. This Agreement will inure to the benefit of Tracecat, its successors and assigns.15. Changes to this Agreement and the ServicesTracecat reserves the right, at its sole and absolute discretion, to change, modify, add to, supplement, suspend, discontinue, or delete any of the terms and conditions of this Agreement (including these Terms of Service and Privacy Policy) and review, improve, modify or discontinue, temporarily or permanently, the Services or any content or information through the Services at any time, effective with or without prior notice and without any liability to Tracecat.Tracecat will endeavor to notify you of material changes by email, but will not be liable for any failure to do so. If any future changes to this Agreement are unacceptable to you or cause you to no longer be in compliance with this Agreement, you must terminate, and immediately stop using, the Services.Your continued use of the Services following any revision to this Agreement constitutes your complete and irrevocable acceptance of any and all such changes.16. No Rights of Third PartiesNone of the terms of this Agreement are enforceable by any persons who are not a party to this Agreement.17. Notices and Consent to Receive Notices ElectronicallyYou consent to receive any agreements, notices, disclosures and other communications (collectively, "Notices") to which this Agreement refers electronically including without limitation by e-mail or by posting Notices on this Site.You agree that all Notices that we provide to you electronically satisfy any legal requirement that such communications be in writing.Unless otherwise specified in this Agreement, all notices under this Agreement will be in writing and will be deemed to have been duly given when received, if personally delivered or sent by certified or registered mail, return receipt requested; when receipt is electronically confirmed, if transmitted by facsimile or email; or the day after it is sent, if sent for next day delivery by a recognized overnight delivery service.Contacting UsIf you have any questions about these Terms of Service or about the Services, please contact us by email at privacy@tracecat.comOr by mail to:IndexHub, Inc.535 Mission St, 14th FloorSan Francisco CA 94105United States --- This Privacy Policy (the "Privacy Policy") serves to inform you of our policies and procedures regarding the collection, use and disclosure of the information we receive when you access and use the website (the "Site"), services, software, mobile applications, content, and all other products and services (all of the foregoing collectively, the "Services") owned, controlled or offered, directly or indirectly, by IndexHub, Inc. (together with its subsidiaries and affiliates, "Tracecat", "we," "our" or "us").Tracecat believes that the privacy of its users is paramount and strives to use Personal Information (as defined below) only in ways outlined in this Privacy Policy. The Privacy Policy is incorporated by reference into our Terms of Service, currently available at Tracecat Terms of Service (the "Terms of Service"). By using the Services, you hereby warrant and represent that you have read, understand and agree to this Privacy Policy and the Terms of Service, that you are a resident of the United States and that you are over 18 years of age.PLEASE DO NOT USE, INSTALL OR ACCESS THE SERVICES IF YOU DO NOT AGREE TO THIS PRIVACY POLICY.1. What We Mean by Personal InformationFor purposes of this Privacy Policy, "Personal Information" means any information from or about a person that either identifies that person directly or that makes that person identifiable when it is combined with other information from or about that person from any source.This includes data such as names, email addresses, phone numbers, and any other identifiers that can be used to distinguish or trace an individual's identity.2. Information We CollectInformation You Provide To UsWhen you use the Services or otherwise communicate with us, we collect information that you provide to us directly. For example, we collect information in the following circumstances:Use our mobile apps or visit the SiteRegister for the Services or create an accountAccess the Services through social networking sites or third party servicesSubscribe to newslettersPurchase a product or service on the Site or in our mobile appsInvite your friends to join the ServicesRequest technical supportContact us via the Site or otherwise communicate with usInformation Collected May Include:Name, email address, telephone numberFinancial and billing informationInformation for newsletter subscriptionsCustomer, supplier, or prospect information including company, title, and order detailsTransaction and limited (non-PCI) payment dataAny other information you choose to share, such as recruitment/job application dataYou can choose not to provide information that is requested; however, this may limit your ability to use or access the Services. If you contact us, a record of such correspondence may be kept.3. Automatically Collected InformationMost of the data we collect in and through the Site and the Services is technical in nature and is collected and processed automatically through application programming interfaces, software development kits, cookies and similar software-based technologies.Device Data:Device advertising IDs and similar hardware qualifiersPrecise location dataUsage Data:Search terms enteredPages viewedNetwork and Internet Information:URLs and Internet Protocol addressesBounce rates and use of spoofingActive (TCP/IP) portsNumber of sessions initiated and click streamsLocation information and network/Wi-Fi access pointsWe may use location based on IP address, network-based geo-location data, and/or GPS coordinates from your mobile device. Your GPS geo-location is accessed in accordance with your device settings.Google Analytics is an element of the Site. You can opt out of Google Analytics by using a browser plugin available at Google's preferences plugin.4. Information You Post on the ServicesThe Services may provide chat, forum or bulletin board tools to users and the ability to create an "avatar" or other customized profile and Account information. Information that you provide through the use of these tools will be available to the public generally.IndexHub has no obligation to keep private any information that you disclose to other users or the public using these functions. You should exercise caution when deciding to disclose Personal Information through the use of these tools or functions.We strongly recommend that you do not post any information through the Services that allows strangers to identify or locate you.5. Information on Third Party WebsitesThe Services may include links to third party websites and social media services where you will be able to post comments, stories, reviews or other information.Your use of these third party websites and social media services may result in the collection or sharing of information about you. We encourage you to review the privacy policies and settings on the third party websites and social media services with which you interact.6. How We Use Cookies and Other TechnologiesSome of the features on the Site and the Services require the use of "cookies" - small text files that are stored on your device's hard drive. We use cookies to measure which pages are being accessed, and which features are most frequently used.Required CookiesEnable you to navigate the Site and use features like accessing secure areas. These cookies allow us to uniquely identify you when logged in and process your online transactions.No option to opt out - essential for operation.Performance CookiesCollect information about how you use our Sites, including which pages you visit most often. This information is only used to improve how the Site functions.Can opt out via browser settings.Functionality CookiesAllow our Sites to remember information you have entered or choices you make (such as your username, language, or region) and provide enhanced, more personal features.Can opt out via browser settings.Targeting/Advertising CookiesWe may engage third parties to track and analyze usage. These cookies remember which browsers have visited the Site to present retargeted advertising based on your previous interactions.Can opt out via advertising network settings.We and our service providers may also use "pixel tags," "web beacons," "clear GIFs," or similar means to track user actions and compile aggregate statistics about Site usage and response rates.7. Use of Collected InformationWe use the information you provide to:Provide the Services, including collecting payment for paid featuresAdminister your use of the Services and any AccountsPersonalize your experienceProvide Service announcements or inform you of new releasesProvide further information and offers we believe you may find usefulPerform tasks on behalf of third parties (payment processors, service providers)Additional uses include:Enforce our Terms of ServiceResolve disputes between usersComply with legal requirements including subpoenas and court ordersProtect our rights, property, or safety and those of our usersContact you for feedback regarding the Site and ServicesMonitor and analyze use of the ServicesImprove the Site and ServicesVerify that users meet required criteria8. Third Parties We Share Personal Information WithWe may disclose Personal Information you provide to us or that we collect automatically with the following categories of third parties:Service providers - payment processors, web hosting, data storage, marketing, and communications service providersAdvertising partners - in compliance with applicable lawPublic authorities - such as law enforcement, if legally required or to protect our rights or the rights of third partiesSubsidiaries and affiliates - or a subsequent owner in connection with a corporate merger, consolidation, sale of assets, or bankruptcy proceedings9. Links to Other WebsitesWe frequently make content or services from other websites available to you from links located on the Site. We may present links in a format that enables us to keep track of whether these links have been followed.You may opt to link your Account to your social media account or other accounts (Facebook, Twitter, Google) in accordance with your Account settings and respective policies of these third parties.This Privacy Policy applies only to the Site and the Services. We do not exercise control over third party services or other websites. Your interactions with these third party services are governed by their privacy policies.We encourage you to read the privacy policies and other terms of third parties before using their services.10. SecurityWe understand the importance of privacy and security of Personal Information to our users and have made them a priority. Tracecat uses a variety of industry-standard security technologies and procedures to help protect Personal Information about you from unauthorized access, use, or disclosure.We train Tracecat employees on privacy and security issues. However, we cannot guarantee that unauthorized third parties will never be able to overcome those measures, and we do not promise that Personal Information about you or private communications will be protected from unauthorized disclosure or use.11. Do Not Track SignalsSome web browsers transmit "do-not-track" signals to websites. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them.We currently do not take action in response to these signals.12. Managing Your PrivacyWe keep your data on your behalf and for your benefit. You can correct or terminate and delete your Account information by following the instructions on the Services or by e-mail at privacy@tracecat.com.If you cancel your Account or request us to delete your information, Tracecat will limit its access to Personal Information to perform what is requested by you and will delete information accessible to Tracecat within seven business days.13. California ResidentsCalifornia Civil Code Section 1798.83 requires certain businesses that share customer Personal Information with third parties for direct marketing purposes to respond to requests from California customers about such practices.We currently do not share or disclose your Personal Information to third parties for direct marketing purposes.Requests to Know - You have the right to request disclosure of:Categories of Personal Information collected about youCategories of Personal Information sold or disclosed for business purposesCategories of sources from which we collected Personal InformationBusiness or commercial purposes for selling or collecting Personal InformationCategories of third parties to whom Personal Information was soldSpecific pieces of Personal Information collectedRequests to DeleteYou have the right to request that we delete any Personal Information about you that we have collected. Upon receiving a verified request, we will do so unless otherwise required or authorized by law.Authorized AgentsYou may designate an authorized agent to make requests on your behalf. You must provide written permission, and we may require that you verify your identity directly with us.The Right to Non-DiscriminationYou have the right not to be discriminated against for exercising your California privacy rights. We will not deny goods/services, charge different prices, or provide different quality based on your exercise of these rights.We do not sell, and have not in the prior 12 months sold, Personal Information about California residents.14. International Transfers of Personal InformationIndexHub is based in the United States. As a result, Personal Information that we collect in and through the Services and on the Site may be transferred to our U.S. offices.We may work with third-party service providers in the U.S. and in other countries to support our business activities. Personal Information may be transferred to, stored on servers in, and accessed from countries other than the country in which it was initially collected.15. Data RetentionWe keep Personal Information related to your Account for as long as it is needed to fulfill the purposes for which it was collected, to provide our services, to deal with possible legal claims, to comply with our business interests and/or to abide by all applicable laws.Thereafter, we either delete Personal Information about you or de-identify it. Even if you request deletion, we may be required by law to retain the Personal Information. Once those requirements are removed, we will delete Personal Information in accordance with your request.16. Changes to the Privacy PolicyOur security and Privacy Policy are periodically reviewed and enhanced as necessary. This Privacy Policy might change as we update and expand the Services.We will endeavor to notify you of these changes by email, but will not be liable for any failure to do so. Your continued use of the Services after any change in this Privacy Policy will constitute your acceptance of such change.17. Contacting UsIf you have any concerns or questions about this Privacy Policy, please contact us at privacy@tracecat.com.If you do not understand any of the terms or conditions of any of our policies, you may also inquire via email at the same address.Methods for Submitting Consumer RequestsYou may submit a request for access and requests to delete Personal Information about you via email to privacy@tracecat.comUpon receipt of a request, we may ask you for additional information to verify your identity. Any additional information you provide will be used only to verify your identity and not for any other purpose.We will acknowledge receipt of your request within 10 days. Subject to our ability to verify your identity, we will respond within 45 days. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.