This Privacy Policy explains how Overcode, Jovana Cvijića 10, 21101 Novi Sad, Serbia, company registration number 67879724 (“Trailogs”, “we”, “us”, or “our”), collects, uses, stores, shares, and protects personal data when you visit the Trailogs website, create an account, use a demo workspace, use Trailogs artificial-intelligence features, contact us, or apply for early access to future paid services.
For the purposes of this Privacy Policy, the Trailogs website, hosted application, demo workspaces, AI features, APIs, integrations, and related functionality are collectively referred to as the “Service”.
1. General
1.1 Scope
This Privacy Policy applies when you:
- visit the Trailogs website;
- register for a Trailogs Account;
- create or use a Demo Workspace;
- create logs or other content within the Service;
- use Explore or other AI Features;
- contact us for support;
- submit an Early-Access or Subscription application;
- otherwise interact with the Service.
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy should be read together with our Terms of Service.
1.2 Early-access Service
Trailogs is currently an early-access product. At present, we may provide only limited Demo Workspaces for evaluation purposes.
Demo Workspaces may be subject to limits relating to logs, AI requests, users, channels, storage, usage duration, or other resources. Demo data may be reset or deleted as described in this Privacy Policy and our Terms of Service.
You should not use a Demo Workspace to store confidential, highly sensitive, regulated, production, or business-critical data.
1.3 Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
When we make changes, we will revise the “Last updated” date. Where required by applicable law or where a change is material, we may also notify registered users through the Service or by email.
Your continued use of the Service after an updated Privacy Policy becomes effective means that the updated Policy will apply to subsequent processing, subject to your rights under applicable law.
2. Who Is Responsible for Your Data?
Overcode is responsible for operating Trailogs.
For Account Data, technical and usage information, support communications, Early-Access applications, security information, and similar data collected for our own purposes, Overcode acts as the data controller.
Users may also submit logs and other content that contain Personal Data relating to other individuals. Depending on the circumstances and the purpose for which such data is submitted, the User or the organization on whose behalf the User acts may be responsible for determining whether that data may lawfully be processed.
You must not submit Personal Data relating to another person unless you are authorized and have a valid legal basis to do so.
3. Personal Data We Process
“Personal Data” means information relating to an identified or identifiable natural person.
We may process the following categories of Personal Data.
3.1 Account Data
Examples include:
- name;
- email address;
- password in hashed form;
- Account identifiers;
- profile information;
- preferred language, appearance, or interface settings;
- registration and Account-status information;
- email-verification and authentication information.
We process Account Data to:
- create and administer your Account;
- authenticate you;
- provide access to the Service;
- maintain Account security;
- communicate important information about your Account or the Service;
- provide requested functionality.
Account Data is generally provided directly by you or generated when your Account is created and used.
3.2 Demo Workspace and Customer Data
Examples include:
- workspace names and settings;
- channel names and descriptions;
- logs, titles, descriptions, and timestamps;
- categories and tags;
- subjects and subject types;
- names or identifiers of responsible and involved people;
- comments, relationships, and metadata;
- files or other content where supported;
- information about who created or modified content;
- integration or API configuration information.
We process this data to:
- provide and operate Demo Workspaces;
- organize and display workspace activity;
- enable search, filtering, and retrieval;
- provide collaboration and access-control functionality;
- generate embeddings and support AI Features;
- prevent abuse and enforce usage limits;
- troubleshoot and improve the reliability of the Service.
Demo Workspaces are provided for evaluation only. Do not submit confidential, highly sensitive, regulated, production, or business-critical data.
3.3 AI and Explore Data
When you use Explore or another AI Feature, we may process:
- your question or prompt;
- conversation messages;
- active context filters;
- relevant logs and associated metadata;
- generated embeddings;
- retrieved Trailogs content;
- AI-generated responses;
- token counts, model information, processing status, and estimated usage cost;
- diagnostic and error information relating to the request.
We process this information to:
- interpret your request;
- identify potentially relevant Trailogs content;
- generate a response;
- maintain conversation context;
- enforce usage limits;
- monitor reliability, security, and performance;
- investigate failures or misuse.
Relevant prompts, logs, metadata, and conversation content may be transmitted to third-party AI providers where necessary to generate embeddings or responses.
AI-generated responses may be inaccurate or incomplete. You should independently review them before relying on them.
3.4 Early-Access and Subscription Application Data
If you request future paid access or submit an Early-Access or Subscription application, we may collect:
- name and email address;
- company or organization name;
- job role;
- team or company size;
- expected number of users;
- intended use of Trailogs;
- requested features;
- application message;
- application status;
- our internal notes and communication history.
We process this information to:
- review your application;
- assess product fit and availability;
- contact you about your application;
- discuss onboarding or commercial terms;
- plan future Trailogs features and capacity;
- maintain a record of applications and decisions.
Submitting an application does not create a paid Subscription and does not authorize us to charge you.
3.5 Technical and Usage Data
Examples include:
- IP address;
- browser and device type;
- operating system;
- approximate location derived from IP address;
- pages and features used;
- login timestamps;
- request and response metadata;
- referring page;
- session identifiers;
- application and server logs;
- error reports;
- security and audit events;
- resource usage and rate-limit information.
We process Technical and Usage Data to:
- provide and maintain the Service;
- authenticate requests;
- protect Accounts and infrastructure;
- detect fraud, misuse, and security incidents;
- enforce usage limits;
- diagnose errors;
- understand Service performance;
- improve usability and reliability.
3.6 Support and Communication Data
When you contact us, we may process:
- your name and email address;
- the content of your message;
- attachments you provide;
- related Account or workspace information;
- our correspondence with you;
- support status and internal notes.
We process this information to respond to your request, investigate issues, provide support, and maintain appropriate records.
3.7 Cookie and Session Data
We may use cookies or similar technologies to:
- keep you signed in;
- protect authentication sessions;
- remember interface preferences;
- prevent security attacks;
- maintain essential application functionality.
More information is provided in the Cookies section below.
3.8 Information We Do Not Currently Collect
Trailogs does not currently process payment-card or billing information because paid Subscriptions are not yet generally available.
If paid Subscriptions become available, we may use a third-party payment provider. We will update this Privacy Policy or provide additional information before beginning such processing.
4. Purposes and Legal Bases for Processing
Depending on the circumstances and applicable law, we process Personal Data on one or more of the following legal bases.
4.1 Performance of a Contract or Steps Requested by You
We process data where necessary to:
- create and administer your Account;
- provide a Demo Workspace;
- provide requested Trailogs functionality;
- respond to support requests;
- process an Early-Access or Subscription application;
- take steps at your request before entering into a potential commercial relationship.
4.2 Legitimate Interests
We may process data where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and freedoms.
These interests may include:
- operating and improving Trailogs;
- protecting the Service and its Users;
- preventing fraud and abuse;
- enforcing usage limits;
- maintaining audit and security records;
- diagnosing errors and monitoring performance;
- understanding how features are used;
- developing the early-access product;
- communicating with existing Users about operational matters.
4.3 Compliance With Legal Obligations
We may process Personal Data where necessary to:
- comply with applicable laws and lawful requests;
- maintain legally required records;
- respond to courts, regulators, or public authorities;
- establish, exercise, or defend legal claims.
4.4 Consent
Where required, we may ask for your consent before:
- sending certain marketing communications;
- using non-essential analytics or cookies;
- processing information for another optional purpose disclosed at the time.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.
5. AI Processing and Service Providers
Trailogs may use third-party AI and infrastructure providers to perform parts of the Service.
When you use an AI Feature, relevant information may be sent to providers that assist us with:
- generating text embeddings;
- semantic retrieval;
- interpreting questions;
- generating responses;
- hosting models or related infrastructure;
- monitoring technical performance and failures.
We disclose only the information reasonably necessary to perform the requested functionality.
Depending on the feature and our current technical configuration, information sent to an AI provider may include your prompt, relevant logs, associated metadata, conversation history, and active context.
You should not include confidential, highly sensitive, regulated, or legally privileged information in Demo Workspace logs or AI prompts.
We may change our service providers as Trailogs develops. Where required, we will update this Privacy Policy or other relevant disclosures.
6. How We Share Personal Data
We may share Personal Data with the following categories of recipients.
6.1 Infrastructure and Hosting Providers
Providers that assist us with:
- application hosting;
- databases;
- storage;
- networking;
- content delivery;
- backups;
- logging and monitoring.
Our primary hosting provider operates data centers in Germany, within the European Union.
6.2 AI Providers
Providers that generate embeddings, process prompts, retrieve relevant information, or generate AI responses.
6.3 Communication and Support Providers
Providers that assist with:
- transactional email;
- Account verification;
- support communications;
- service notifications;
- application or onboarding communication.
6.4 Analytics and Error-Monitoring Providers
Where enabled, providers that help us understand Service performance, diagnose errors, and improve reliability.
We will obtain consent before using non-essential tracking technologies where consent is required by law.
6.5 Professional Advisers
We may share information with lawyers, accountants, auditors, insurers, and other professional advisers where reasonably necessary.
6.6 Authorities and Legal Recipients
We may disclose information where reasonably necessary to:
- comply with applicable law or a lawful request;
- respond to a court, regulator, or public authority;
- protect the rights, safety, and security of Trailogs, our Users, or another person;
- investigate fraud, security incidents, or violations of our Terms;
- establish, exercise, or defend legal claims.
6.7 Corporate Transactions
If Overcode is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, Personal Data may be disclosed to relevant advisers, potential counterparties, or successors, subject to appropriate confidentiality protections.
We do not sell Personal Data to advertisers or data brokers.
7. International Data Transfers
Our primary hosting infrastructure is located in the European Union (Germany). Trailogs is established in Serbia, and our personnel may access Personal Data from Serbia in order to operate and support the Service. We and our service providers may also process Personal Data in the United States or other countries in which relevant providers operate, as described in our Data Processing Agreement.
Because Trailogs is established in Serbia, a country that has not been granted an adequacy decision by the European Commission, our access to Personal Data hosted in the European Union, the United Kingdom, or Switzerland is itself treated as an international transfer under applicable data-protection law, regardless of where the data is physically stored. Where this applies, we rely on safeguards required by that law, which may include:
- the Standard Contractual Clauses approved by the European Commission (as further described in our Data Processing Agreement);
- a legally recognized adequacy decision;
- other contractual and technical safeguards;
- another legally permitted transfer mechanism.
The privacy and data-protection laws of a destination country may differ from those that apply in your country.
You may contact us for further information about safeguards applicable to a particular transfer.
8. Data Retention
We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, comply with legal obligations, resolve disputes, maintain security, and enforce agreements.
The following periods are our general retention guidelines and may vary where a longer or shorter period is required or justified.
| Data type | General retention approach |
|---|---|
| Account Data | Retained while your Account is active and ordinarily deleted or anonymized within 30 days after Account deletion, unless longer retention is required |
| Demo Workspace Data | Retained while the Demo Workspace is available, but may be reset or deleted earlier at any time as permitted by the Terms |
| Explore Conversations and AI Data | Retained while associated with an active Account or Demo Workspace, unless deleted earlier or retained temporarily for security and troubleshooting |
| Generated Embeddings | Retained while the associated content remains available and ordinarily deleted when the associated content or workspace is permanently deleted |
| Early-Access Applications | Retained while the application is under consideration and for up to 24 months afterward, unless a longer period is needed for follow-up, legal compliance, or a resulting commercial relationship |
| Support Correspondence | Retained for up to 24 months after the matter is closed, unless longer retention is reasonably necessary |
| Security and Technical Logs | Ordinarily retained for up to 12 months, with shorter or longer periods where appropriate for security, debugging, or legal obligations |
| Consent Records and Legal Records | Retained for as long as reasonably necessary to demonstrate compliance or meet legal obligations |
Deletion from active systems may not immediately remove data from encrypted backups. Backup copies may remain until they are overwritten according to our backup-retention cycle.
We may retain limited information after deletion where necessary to:
- comply with legal obligations;
- prevent fraud or abuse;
- maintain security records;
- resolve disputes;
- establish, exercise, or defend legal claims.
Because Trailogs currently provides an evaluation environment, you should maintain your own copy of any information you do not wish to lose.
9. Cookies and Similar Technologies
Trailogs uses cookies and similar technologies that are necessary to operate and secure the Service.
These may include:
- authentication and session cookies;
- cross-site-request-forgery protection;
- security and load-balancing cookies;
- interface and appearance preferences;
- language or workspace preferences.
Essential cookies do not require consent where they are strictly necessary to provide a service requested by the User.
We do not currently use advertising or cross-site behavioral-tracking cookies.
If we introduce non-essential analytics, advertising, or similar technologies, we will provide appropriate information and obtain consent where required before activating them.
You can configure your browser to reject or delete cookies. Blocking essential cookies may prevent you from signing in or using parts of the Service.
10. Data Security
We use technical and organizational measures intended to protect Personal Data against unauthorized access, loss, alteration, disclosure, or destruction.
Depending on the nature of the data and Service, these measures may include:
- HTTPS/TLS encryption in transit;
- access controls and authentication;
- hashed passwords;
- restricted administrative access;
- environment and secret management;
- database and infrastructure security controls;
- logging and monitoring;
- backups and recovery procedures;
- review of service-provider access;
- software and dependency updates.
No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.
You are responsible for using a strong password, protecting your credentials, and promptly notifying us if you believe your Account has been compromised.
11. Your Data-Protection Rights
Depending on applicable law and the circumstances, you may have the right to:
- request confirmation of whether we process your Personal Data;
- request access to your Personal Data;
- request correction of inaccurate or incomplete data;
- request deletion of your Personal Data;
- request restriction of processing;
- object to certain processing based on legitimate interests;
- receive certain data in a structured, commonly used, machine-readable format;
- request transmission of eligible data to another controller where technically feasible;
- withdraw consent where processing is based on consent;
- object to direct marketing;
- lodge a complaint with a competent data-protection authority.
These rights are not absolute. A request may be limited or refused where permitted by law, including where processing is necessary to comply with a legal obligation, protect another person’s rights, or establish, exercise, or defend legal claims.
To exercise your rights, contact support@trailogs.com.
We may request information necessary to verify your identity and protect your Account before completing a request.
We will respond within the time required by applicable law.
12. Complaints
You may contact us first at support@trailogs.com so that we can attempt to resolve your concern.
You may also submit a complaint to the competent data-protection authority.
In Serbia, the competent supervisory authority is:
Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may instead (or in addition) lodge a complaint with the data-protection supervisory authority of your country of habitual residence, your place of work, or the place of the alleged infringement.
Your right to contact a supervisory authority is not affected by any other administrative or judicial remedy available to you.
13. Automated Decision-Making
Trailogs does not currently use Personal Data to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning Users.
AI Features may automatically retrieve, summarize, classify, or generate responses based on Trailogs content. These functions are designed to assist Users and are not intended to make legally significant decisions about individuals.
Early-Access and Subscription applications may be reviewed using information supplied by applicants, but final access decisions are not intended to be made solely by automated processing.
14. Children’s Privacy
The Service is not intended for children who cannot lawfully agree to these Terms or provide Personal Data without authorization under applicable law.
We do not knowingly collect Personal Data from children in circumstances where parental or guardian authorization is legally required.
If you believe that a child has provided Personal Data to Trailogs without the required authorization, contact support@trailogs.com.
15. Third-Party Links and Integrations
The Service may contain links to third-party websites or support integrations with third-party services.
This Privacy Policy does not govern how independent third parties process Personal Data. Their processing is governed by their own privacy policies and terms.
When you enable an integration, information may be exchanged between Trailogs and the selected third-party service as necessary to provide the integration. You are responsible for ensuring that you are authorized to connect the service and transfer the relevant data.
16. Contact
For questions, requests, or complaints regarding this Privacy Policy or our handling of Personal Data, contact:
Email: support@trailogs.com