Tracy keeps account and sign-in records, site access records, website data, conversations, comments and files needed for its features.
Use this article to understand the main data and access mechanisms. For questions about your account, a data request or a security concern, contact the team through Tracy Discord. Do not post passwords, connection tokens, sign-in codes or private site exports publicly.
What data does Tracy keep?
Tracy keeps account and sign-in records, site access records, website data, conversations, comments and files needed for its features.
The main categories include:
- Account information, such as your sign-in email and profile details received through a connected sign-in provider.
- Sign-in verification and session records. Email sign-in uses a six-digit code rather than a Tracy account password.
- Site information, team memberships and invitations, build details and change records.
- Your website’s files, database and uploads, plus backups and prepared export packages.
- Chat records, comments and comment attachments.
- Connection credentials, including imported-site connector tokens and connected AI account credentials.
- Site preferences that Tracy may remember from your requests for later conversations on that site.
A remembered preference is separate from the website’s published content. You can ask Tracy to forget a remembered preference. For a broader request to access or delete stored information, contact Tracy Discord.
Do not assume that signing out, deleting a comment or disconnecting an account removes every associated record. These actions have different scopes, described below.
Does Tracy keep the password I use during import?
Passwords entered in the import form are used for that import attempt and are not stored; Tracy keeps the connector token used to connect to the site.
The password and the connector token are different credentials. Keeping the connector token lets Tracy connect again without saving your admin password. Enter credentials only in the relevant import fields, not in chat or a public support message.
This import behavior does not mean that Tracy stores no secrets. Connected AI accounts and other configured connections can require saved credentials. Read Import a site for the import process and its effects on the original site.
Who can access a site and its comments?
Access through Tracy depends on an accepted site membership and its Owner, Editor or Viewer role.
- A Viewer can review the site, comment and ask read-only questions.
- An Editor can change the site, including code, and can publish and restore supported backups.
- An Owner also manages people and site lifecycle actions, including site deletion.
A pending invitation does not grant access. Review the site’s “Team” tab and give each person the role their work requires. See Team, roles and invitations before granting Editor or Owner access.
Site comments are shared with the site’s members. Reading a comment attachment requires site access; copying its link does not make the file public. Keep team comments separate from content you intend to publish on the website.
Tracy also has operational access controls. The operational view of customer request text and replies is restricted to configured readers, and those reads are recorded. Do not assume that no authorized staff member can ever access customer messages.
What happens to voice and AI requests?
Voice input is sent to the configured speech service for transcription, and spoken replies send reply text to that service to generate audio.
The speech configuration can use an external provider. Voice input should therefore not be treated as processing that happens only on your device. Transcribed words that you send as a request become part of the conversation.
AI requests send conversation content and relevant site context to the model provider used for the request. Supported images can also be included. Your connected AI accounts belong to your Tracy account; other team members use their own AI accounts.
Do not include passwords or unnecessary sensitive information in typed requests, voice requests, comments or attachments. For questions about provider processing, training, storage location or applicable data terms, contact Tracy Discord before sharing sensitive information. This article does not establish a provider training or retention policy.
See AI accounts, models and limits for connections and model routing.
What does disconnecting an AI account remove?
Disconnecting an AI account removes its saved credential from Tracy’s connection record and invalidates pending sign-in attempts for that provider.
Use “Disconnect” in “AI accounts” for the relevant connection. The connection record can remain without its credential, so disconnecting is not deletion of every associated record.
This action concerns the credential held by Tracy. It does not establish that the provider has revoked access on every device or ended other sessions. If you need to revoke access at the provider, check that provider’s own account controls as well.
If this does not work: Read the displayed error and check the connection’s current state before trying again. Report a persistent problem through Tracy Discord, without sharing the credential.
Does signing out end every session?
Signing out ends this browser session only.
Use “Sign out” when you finish on a shared device or want to switch accounts. Do not assume that this signs out another browser or device, removes your team memberships or deletes your connected AI account credentials.
If you suspect someone else has account access, contact the team through Tracy Discord. Do not post sign-in codes or invitation links publicly.
What happens if I stop using Tracy?
If you stop using Tracy, your site is kept and can still be downloaded for 6 more months.
This policy concerns the site and its download access. It does not promise continued public hosting or set the retention period for account records, conversations, comments, connection records or every backup. A prepared export package has its own availability period; see Export your site.
Leaving a site’s team removes your access to that site and does not delete the website. Deleting a site is a separate Owner-only action that cannot be undone. Download what you need before requesting or confirming deletion.
Site deletion can report incomplete cleanup or an unknown result. A site disappearing from your list is not proof that every associated record or stored copy has been erased. Contact Tracy Discord with the site identifier and displayed details if cleanup is incomplete or you need confirmation about particular data.
How do I request account changes or access to my data?
For account changes, account deletion or data requests, contact the team through Tracy Discord.
Use Tracy Discord to explain whether the request concerns your account, a particular website or a type of stored data. Ask the team how to provide any private details required to identify the request. Do not publish those details in a public channel.
A downloadable site package is different from a request for your account data. Disconnecting an AI account, leaving a team and deleting a site also have different effects. State which outcome you need so the team can address the appropriate request.
For storage regions, data processors, backup arrangements, retention of particular records or the scope of a deletion, ask the team for the applicable information. Do not infer a certification, security guarantee, deletion deadline or support response time from the mechanisms described here.
What should I check before approving a change?
AI can make mistakes. Not every change can be undone, and external effects cannot be recalled.
Review the requested action, the affected pages and any confirmation shown. Ordinary edits can apply immediately; a confirmation is not a guarantee that every possible risk has been detected. Check the resulting site and use the available change history and recovery tools within their documented limits.
See See what Tracy changed, Undo and backups and Limits and what Tracy does not do before relying on recovery.
Frequently asked questions
What data does Tracy keep?Tracy keeps account and sign-in records, site access records, website data, conversations, comments and files needed for its features.
Does Tracy keep the password I use during import?Passwords entered in the import form are used for that import attempt and are not stored; Tracy keeps the connector token used to connect to the site.
Who can access a site and its comments?Access through Tracy depends on an accepted site membership and its Owner, Editor or Viewer role.
What happens to voice and AI requests?Voice input is sent to the configured speech service for transcription, and spoken replies send reply text to that service to generate audio.
What does disconnecting an AI account remove?Disconnecting an AI account removes its saved credential from Tracy’s connection record and invalidates pending sign-in attempts for that provider.
Does signing out end every session?Signing out ends this browser session only.
What happens if I stop using Tracy?If you stop using Tracy, your site is kept and can still be downloaded for 6 more months.
How do I request account changes or access to my data?For account changes, account deletion or data requests, contact the team through Tracy Discord.