Terms of Service
These Terms of Service govern your use of NativeLink, the hosted cloud service, and any related products operated by Trace Machina ("we," "us"). By accessing or using the service, you agree to be bound by these terms.
1. Acceptance of Terms
By creating an account, deploying NativeLink, or otherwise using our service, you confirm that you have read these terms, agree to them, and have the authority to bind your organization where applicable. By agreeing, you also consent to our collection and processing of personal data as described in the Privacy Policy below. Your consent is specific and informed, and you may withdraw it at any time (see Consent & withdrawal).
2. License & Use
NativeLink is distributed from a monorepo with module-aware licensing. Most modules are licensed under FSL-1.1-Apache-2.0, while some commercial modules, including metrics and remote persistent workers, are licensed under the Business Source License. Developers using NativeLink for an individual cache do not need a commercial license; team and production usage of commercial modules can be covered by an intentionally very inexpensive separate license. See the license page for details. NativeLink Cloud and Enterprise offerings are provided under the separate agreement you accept when you sign up for those services.
3. Accounts
You are responsible for safeguarding any credentials issued to your account and for all activity that occurs under those credentials. Notify us promptly of any unauthorized use.
4. Acceptable Use
You agree not to use the service to violate any law, infringe third-party rights, distribute malware, or interfere with the integrity or performance of the service or its users.
Privacy Policy
We treat your data as if it were our own — because if you're running builds on our infrastructure, in a real sense it is. This policy describes what we collect, why, and your rights over that data.
What we collect
- Account information (name, email, organization) when you sign up for Cloud or Enterprise.
- Build metadata (action digests, timing, success/failure) for the purpose of running and improving the service. Build artifacts themselves are content-addressed and never inspected by us.
- Anonymous usage telemetry from the source-available release, which can be disabled with a single flag.
- Standard server logs (IP addresses, user agents) retained for 30 days for security and abuse detection.
Cookies
We use first-party cookies to keep you signed in and to remember your preferences. Analytics is run server-side with no third-party tracking cookies set on this site.
Your rights
You may request access to, correction of, or deletion of personal data we hold about you at any time by emailing privacy@tracemachina.com. If you're an EU/UK resident, this includes the rights granted under GDPR / UK GDPR.
Consent & withdrawal
Where we rely on your consent to process personal data, that consent is freely given, specific, and informed. You give it when you agree to these terms during sign-up, and the processing it covers is the collection and use of the data described in What we collect for the purposes of providing, securing, and improving the service.
You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To withdraw, request the Data Subject Consent Withdrawal Form by emailing privacy@tracemachina.com or write to us at the postal address in Contact. We keep a record of the consents we rely on and honor withdrawal requests promptly.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. California residents may exercise their rights under the CPRA using the same contact methods above.
Contact
Questions about these terms or our privacy practices? Email legal@tracemachina.com or write to Trace Machina, Inc., Attn: Legal, PO Box 60676, 265 Cambridge Ave, Palo Alto, CA 94306.
Change history
Material changes to the Terms of Service and Privacy Policy are recorded here.
- July 24, 2026: Added a data-processing consent clause and a Consent & withdrawal section covering how consent is given, how it can be withdrawn, and that we do not sell or share personal data.
- July 24, 2026 — Added this change history section. No changes to the terms or the policy.
- July 7, 2026— Updated the legal contact address to Trace Machina's Palo Alto mailing address.
- May 29, 2026 — Updated the license terms to module-aware licensing (FSL-1.1-Apache-2.0, with some commercial modules under the Business Source License) and clarified telemetry wording for the source-available release.
- April 12, 2026 — Prior revision of the Terms of Service and Privacy Policy.