Privacy, security, and self-hosting.

ReasonTrail provides hosted and self-hosted project-memory workflows. Legal operator and customer-contract details remain the source of truth for formal notices; this page does not invent a contact address that is not monitored.

For account and access questions, use the signed-in application support path or the onboarding contact flow.

For a self-hosted installation, the person or organization running the deployment controls the project data stored in that deployment.

For a public onboarding or contact form on this site, the operator of this website controls the contact details submitted through that form.

The early-access form may collect name, email, role, active project count, current AI tools, hosting preference, and optional message content.

A self-hosted ReasonTrail deployment may store projects, conversations, tasks, decisions, resources, review items, usage records, local account details, and configuration settings.

A contributor's raw conversation remains private to that contributor. Project or organization membership does not grant access to its transcript, detail, search, review payload, or private graph edges.

Authorized project members can share approved project knowledge separately. Source references preserve provenance without widening access to the private transcript.

AI features are optional. If enabled, selected project context may be sent to the configured AI provider or local model runtime to answer a request.

The self-hosted database remains local to the deployment, but provider requests are governed by the provider configured by the operator.

Google Analytics is disabled by default. If you accept optional analytics, ReasonTrail loads GA4 to measure public page views, calls to action, signup and AppSumo redemption steps. Analytics events never include email addresses, names, AppSumo codes, repository or project names, prompts, conversation text, private identifiers, or user-generated content.

Your analytics choice is stored in a first-party cookie for up to one year. Use the Privacy choices control on any page to withdraw or change consent; withdrawing consent stops future collection and removes accessible Google Analytics cookies.

Authenticated app sessions use necessary server-side session cookies for login and security.

EU users may have rights to access, correction, deletion, restriction, portability, objection, and complaint to a supervisory authority, depending on the final operator and processing context.

Formal data-rights requests should use the contact point in the applicable customer or legal notice; retention depends on the deployment and record type.