Información legal

Privacy policy

Describes how TRACEA processes personal data when providing the service. Aligned with the processing activity registry implemented in the product.

Version
1.1.0
Effective date
2026-06-22
Updated
2026-06-22

Data controller

Altura Business System LLC — info@alturabusinesssystem.com

Address: 3500 Comanche Road NE, BLDG, Albuquerque, New Mexico, Estados Unidos.

Account data

Email, credentials, preferences, active sessions, recovery tokens, two-factor data (if enabled), and legal acceptance metadata.

Case file data

Case metadata, participants, roles, statuses, declared legal authority, and links between documented facts.

Communications

Co-parent messages, send/open metadata, and recorded external communication facts (channel, date, summary).

Incidents

Documented incident records in the case file, including probatory metadata and minor links where applicable.

Expenses

Amounts, statuses, metadata, and probatory relationships of shared expenses recorded in the case file.

Evidence

Probatory files, server-computed SHA-256 hashes, metadata, documentary custody chain, and append-only events.

Photographs

Images uploaded as evidence or quick capture, with hash and integrity from registration in TRACEA.

Videos

Videos uploaded as evidence or quick capture, with hash and integrity from registration in TRACEA.

User-uploaded documentation

Documents and signed expert reports stored as immutable records (filename, MIME type, hash, storage path).

Minor-related information entered by adults

Minor identifying data (name, surname, date of birth, notes) and documentary links to messages, incidents, handoffs, or decisions, entered by adult account holders or authorized adults.

Effective access is governed by case roles and the documented minor access matrix; PENDING DEFINITIVE POLICY: formal parental authority verification procedure.

Purposes

  • Providing the TRACEA service and managing case files.
  • Authentication, security, unauthorized access prevention, and traceability.
  • Technical support within documented boundaries (support cannot read private conversations).
  • Contractual compliance, data subject rights (DSAR), and applicable legal obligations.
  • Generating probatory exports requested by authorized users.

Legal basis

Contract performance: registration, case access, and contracted features.

Consent: co-parent invitations, specific declarations, and non-essential cookies where applicable.

Legitimate interest: probatory recording of evidence, messages, and documented facts, per the technical processing registry.

Legal obligation: responding to data subject requests and minimum retention required by applicable law.

Retention

Technical retention periods by data category are defined in the product retention policy registry.

Evidence, judicial exports, audit logs, and legal acceptances are configured with probatory preservation prioritized over automatic deletion.

The definitive Evidence Retention Policy for users is **PENDING DEFINITIVE POLICY**; an audited internal draft exists without publication as a closed policy.

PENDING DEFINITIVE POLICY: contractual and commercial retention periods after account closure.

Recipients and infrastructure

Data associated with case files managed from the European region (TRACEA Europa) is stored and processed within the European Union.

Declared infrastructure provider: Hetzner Online GmbH.

Technical subprocessors documented in the product third-party registry include PostgreSQL, deployment filesystem storage, and TRACEA Verify (integrity verification, ES).

PENDING DEFINITIVE POLICY: data processing agreements (DPA) and definitive contractual subprocessor list.

GDPR rights

You may exercise access, rectification, erasure, objection, restriction, and portability by contacting info@alturabusinesssystem.com or through DSAR features when available for your account.

Erasure may be limited when non-deletable probatory data classified as category C exists (evidence, custody, judicial exports, audit), per the audited internal retention draft.

You have the right to lodge a complaint with the competent supervisory authority.