Privacy

BuildTrace is a platform built and run by Erbo (KVK 78040566, the Netherlands). This page covers buildtrace.eu, the app at app.buildtrace.eu and the status page at status.buildtrace.eu. Last updated 2 November 2026.

Who is responsible

Erbo is the controller for the personal data described here: your account, the contact form and our logs. The data your team puts into a workspace (parts, builds, serials, devices) belongs to your organisation. We store and process it only to run BuildTrace for you.

Questions and requests go to hello@buildtrace.eu.

What we keep

• Your account. Name, email address, the workspaces you belong to and your role in them. Your password is stored only as a bcrypt hash. If you sign in with Google, we receive your name and email address from Google and nothing else.
• What you do in a workspace. Records you create or change carry your name and a timestamp, so your team can see who did what. That history is part of the traceability record.
• Files you upload. Attachments and firmware images are stored with the workspace they belong to.
• The contact form and email. Your name, email, company and message are sent to our inbox, hello@buildtrace.eu, and are not stored in BuildTrace itself. The same goes for anything you email us.
• Logs. Our servers log requests, including the IP address, for security and troubleshooting. Query strings are left out, so reset and invite links don't end up in logs. Logs rotate out after a short time.

We don't use analytics, advertising or tracking. This site sets no cookies. The app sets one cookie, bt_refresh, which keeps you signed in. It is needed for the app to work.

Where it is stored

BuildTrace runs on OVHcloud servers in France. The database, uploaded files and backups stay there. The database is backed up daily. Backups on the server are kept for 14 days, and copies in separate OVHcloud storage are kept for up to 90 days.

Who else processes it

• OVHcloud (France) hosts the servers, files and backups.
• Scaleway (France) sends our emails: password resets, invitations and contact form messages.
• Google Workspace hosts our inbox, where contact form messages and your emails to us arrive. For users in the EU, Google Ireland provides it; transfers to the United States are covered by the EU standard contractual clauses.
• Google, only if you choose to sign in with Google.

We don't sell personal data or share it with anyone else, unless the law requires it.

How long we keep it

We keep your account while you use BuildTrace. When you ask us to delete it, we remove your account. Records you made in a workspace stay with that workspace, because they are part of your organisation's traceability record. Deleted data disappears from backups as they expire, within 90 days.

Your rights

You can ask us for a copy of your personal data, and ask us to correct it, delete it or limit how we use it. You can also object to how we use it, or ask for it in a portable format. Email hello@buildtrace.eu and we reply within a month. If you think we handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

When this page changes in a way that matters, we update the date at the top and tell account holders by email.