Privacy Policy

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register on the Services, express interest in our products, participate in activities on the Services, or otherwise contact us. The personal information we collect may include:

• Names
• Email addresses
• Usernames
• Passwords
• Contact preferences
• Contact or authentication data
• Mailing addresses

We do not process sensitive information. If you register using a social media account, we collect certain profile information from that provider — see "How do we handle your social logins?" below.

All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

This information does not reveal your specific identity but may include device and usage information used to maintain security, operate the Services, and support internal analytics. It includes:

• Log and usage data — diagnostic, usage, and performance information our servers record automatically, including IP address, browser type, activity timestamps, and pages viewed.
• Device data — information about the computer, phone, or tablet you use to access the Services, such as hardware model, operating system, and Internet service provider.
• Location data — imprecise location inferred from your IP address. You can opt out via your device settings, though this may limit some features.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We process personal information for a variety of reasons, depending on how you interact with the Services, including to:

• Facilitate account creation and authentication, and manage user accounts.
• Request feedback and contact you about your use of the Services.
• Identify usage trends so we can better understand and improve the Services.
• Save or protect an individual's vital interest, such as to prevent harm.

If you are located in the EU or UK

The GDPR and UK GDPR require us to explain our legal bases for processing:

• Consent — where you've given permission for a specific purpose. You can withdraw consent at any time.
• Legitimate interests — where processing is reasonably necessary to achieve our business interests and doesn't outweigh your rights, such as analyzing and improving how the Services are used.
• Legal obligations — where required to comply with law, cooperate with regulators, or defend our legal rights.
• Vital interests — where necessary to protect someone's safety.

If you are located in Canada

We process information with your express or implied consent, which you may withdraw at any time. In limited cases permitted by law — such as fraud detection, business transactions, or compliance with a court order — we may process information without consent.

We may share your data with vendors, consultants, and service providers who perform work on our behalf and are contractually required to safeguard it. These categories include:

• Ad networks
• AI platforms
• Sales & marketing tools
• Website hosting service providers
• User account registration & authentication services
• Data analytics services

We may also share information in connection with a business transfer (such as a merger or acquisition), with our affiliates under this same Privacy Notice, or with business partners to offer you certain products or promotions.

We use cookies and similar technologies to maintain security, prevent crashes, fix bugs, save preferences, and support core site functions. Some third parties and service providers may also use tracking technologies for analytics on our Services.

Google Analytics

We may share information with Google Analytics to track and analyze use of the Services. You can opt out of Google Analytics tracking by visiting Google's opt-out page.

As part of the Services, we offer features powered by artificial intelligence and machine learning (collectively, "AI Products"), including AI-driven automation such as profit & loss insights and expense categorisation. Your inputs, outputs, and related personal information are shared with and processed by our AI Service Providers to enable these features. All such processing is handled in line with this Privacy Notice and our agreements with those providers.

If you choose to register or log in using a third-party social media account, we receive certain profile information — typically your name, email address, and profile picture. We use this only for the purposes described in this Notice. We are not responsible for how your social media provider handles your information; review their own privacy notice for details.

No purpose in this Notice requires us to keep your personal information for longer than the period you maintain an account with us. When there is no ongoing legitimate need to process your data, we delete or anonymize it — or, where that isn't immediately possible (for example, backup archives), we securely isolate it until deletion is possible.

Despite our safeguards, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee that unauthorized third parties will never defeat our security. Transmission of personal information to and from the Services is at your own risk — access it only within a secure environment.

If you are in the EEA, UK, Switzerland, or Canada, you may have the right to access and obtain a copy of your data, request rectification or erasure, restrict processing, request data portability, and — where applicable — object to automated decision-making. Contact us via the details in "Contact us" to make a request.

If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing consent — where we rely on your consent, you may withdraw it at any time; this won't affect processing carried out before withdrawal.

Marketing communications — unsubscribe anytime via the link in our emails or by contacting us. We may still send necessary service-related messages.

Account information — review or update your account in your settings, or contact us to terminate it. We may retain limited information afterward to prevent fraud, resolve disputes, or meet legal obligations.

No uniform technical standard for Do-Not-Track (DNT) signals currently exists, so we do not respond to browser DNT signals at this time. If a legal standard is adopted, we'll update this Notice accordingly.

Global Privacy Control (GPC) — we recognize and honor GPC signals. If your browser sends one, we treat it as a valid opt-out of the sale or sharing of your personal information for targeted advertising under applicable state laws, including the CCPA, applied automatically.

This applies to residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

Categories of personal information we collect

Note: verify this table against Tracktar's actual data collection (e.g. whether you truly collect biometric, geolocation, or audio/sensory data) before publishing — see note at the end of this document.

Your rights

• Right to know whether we're processing your data
• Right to access your data
• Right to correct inaccuracies
• Right to request deletion
• Right to obtain a copy of data you've shared with us
• Right to non-discrimination for exercising these rights
• Right to opt out of targeted advertising, sale, or certain profiling

To exercise these rights, email support@tracktar.com or visit tracktar.com/contact. We honor GPC opt-out signals automatically. You may designate an authorized agent to act on your behalf, subject to proof of authorization.

Upon receiving a request, we verify your identity using only the information provided in your request. If we decline to act on a request, you may appeal by emailing support@tracktar.com; if denied, you may escalate to your state attorney general.

California "Shine the Light" — California residents may request, once a year and free of charge, details of any personal information we've disclosed to third parties for direct marketing purposes in the prior calendar year.

We may update this Privacy Notice from time to time. The "Last updated" date at the top reflects the latest revision. For material changes, we'll notify you by posting a prominent notice or sending a direct notification.

Depending on the laws of your country or US state of residence, you may have the right to request access to the personal information we collect about you, details of how it's been processed, or its correction or deletion. You may also withdraw your consent to processing where applicable. To make a request, contact us at support@tracktar.com.