Data and privacy¶
What Transica stores, for how long, and what it never touches. The privacy policy is the authoritative version, with the full data inventory and processors.
What's stored¶
| Data | Kept | Notes |
|---|---|---|
| Free scan reports | 7 days (30 if you attach one to a message to us) | Private: only someone with the link can open one. Delete any time. |
| MCP directory check results | Not stored | Only daily quota counters. |
| Scans and checks through the Transica connector | Not stored | A scan is deleted as soon as its result reaches your AI app (within 10 minutes if it's slow). The report link runs it again. |
| Test steps and screenshots | Screenshots 12 months on paid plans, 90 days on Free | Delete a report to remove them sooner. |
| Captured API samples from tests and explores | 30 days | Fields are masked; request bodies are read only for their structure and never stored; uploads are never read. The list of endpoints stays with the test results. |
| Test-account passwords, server tokens | Until you remove them | Encrypted; never shown again; handed to the runner only while a test runs. |
| Hosted tool-call records | Up to 90 days per call, 13 months as daily totals; Maker keeps 7 days and Business 90 | Tool, outcome, latency, AI app, anonymous daily session and argument names only. Never argument values, results, tokens or IP addresses. |
| People's sign-ins to hosted connectors | Until they disconnect, you turn hosting off, or 90 days unused | Their provider's tokens, encrypted with a key only their AI app's sign-in unlocks. |
| Agent traffic records | 90 days from the upload or the day records arrived | The log file itself is deleted once read. Kept: daily counts, named bots, top pages and up to 200 sample visits. Never IP addresses; query strings trimmed. |
| API spec copies | With the connector | So new versions can re-read them. |
| Billing and audit records | Kept after deletions | Required for accounting and security. |
What's never done¶
- Agents never use a real customer's account, never pay, close accounts, change credentials or message other people.
- Hosted tools never pass your customers' passwords to AI apps, and AI apps never get your provider's tokens.
- Transica doesn't get your AI chats, and its connector never asks for personal data.
- Robots rules and bot challenges are never bypassed.
AI models¶
Tests and explores use AI models through a routing provider, on settings that don't keep your data where that's offered. Comparisons name the models they used. Some checks are marked AI-assisted (for example "The listing describes only what the tools do") because a model judged them; they may be wrong, and your confirmation decides.