Skip to content
NativeLink

Legal

Terms & Privacy

The terms that govern your use of NativeLink and our commitment to handling your data responsibly.

Last updated · April 12, 2026

Terms of Service

These Terms of Service govern your use of NativeLink, the hosted cloud service, and any related products operated by Trace Machina ("we," "us"). By accessing or using the service, you agree to be bound by these terms.

1. Acceptance of Terms

By creating an account, deploying NativeLink, or otherwise using our service, you confirm that you have read these terms, agree to them, and have the authority to bind your organization where applicable.

2. License & Use

NativeLink is distributed from a monorepo with module-aware licensing. Most modules are licensed under FSL-1.1-Apache-2.0, while some commercial modules, including metrics and remote persistent workers, are licensed under the Business Source License. Developers using NativeLink for an individual cache do not need a commercial license; team and production usage of commercial modules can be covered by an intentionally very inexpensive separate license. See the license page for details. NativeLink Cloud and Enterprise offerings are provided under the separate agreement you accept when you sign up for those services.

3. Accounts

You are responsible for safeguarding any credentials issued to your account and for all activity that occurs under those credentials. Notify us promptly of any unauthorized use.

4. Acceptable Use

You agree not to use the service to violate any law, infringe third-party rights, distribute malware, or interfere with the integrity or performance of the service or its users.

Privacy Policy

We treat your data as if it were our own — because if you're running builds on our infrastructure, in a real sense it is. This policy describes what we collect, why, and your rights over that data.

What we collect

  • Account information (name, email, organization) when you sign up for Cloud or Enterprise.
  • Build metadata (action digests, timing, success/failure) for the purpose of running and improving the service. Build artifacts themselves are content-addressed and never inspected by us.
  • Anonymous usage telemetry from the source-available release, which can be disabled with a single flag.
  • Standard server logs (IP addresses, user agents) retained for 30 days for security and abuse detection.

Cookies

We use first-party cookies to keep you signed in and to remember your preferences. Analytics is run server-side with no third-party tracking cookies set on this site.

Your rights

You may request access to, correction of, or deletion of personal data we hold about you at any time by emailing privacy@nativelink.com. If you're an EU/UK resident, this includes the rights granted under GDPR / UK GDPR.

Contact

Questions about these terms or our privacy practices? Email legal@nativelink.com or write to Trace Machina, Attn: Legal, 548 Market St, San Francisco, CA 94104.

Ship faster

Let's build at the speed your code is being written.

Open source. Free cloud tier. Self-host the moment your team is ready.