Privacy Policy

Last updated: March 2026

1. Introduction

TrackFlow ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information.

2. Information We Collect

We collect the following types of information:

Data Type	Purpose	Retention
Email address	Account creation, notifications	Until account deletion
Username	Account identification	Until account deletion
Password (hashed)	Authentication	Until account deletion
Click data	Attribution analytics	1 year
IP address (hashed)	Fraud prevention, analytics	90 days
Device fingerprint	Attribution matching	7 days

3. How We Use Your Data

We use your information to:

• Provide and maintain the Service
• Process transactions and send billing information
• Send notifications about your account
• Provide customer support
• Analyze usage to improve the Service
• Detect and prevent fraud

4. Data Sharing

We do NOT sell your personal data. We may share data with:

• Service providers: Payment processors (Stripe), email services
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger or acquisition

5. Data Security

We implement industry-standard security measures:

• Passwords are hashed using bcrypt
• All data transmitted over HTTPS/TLS
• IP addresses are hashed, not stored in plain text
• Regular security audits and updates

6. Your Rights

You have the right to:

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Export your data in a standard format
• Objection: Object to certain processing

To exercise these rights, contact us at privacy@trackflow.io

7. Cookies

We use essential cookies for:

• Authentication (keeping you logged in)
• Attribution tracking (linking clicks to subscribers)

We do not use advertising or third-party tracking cookies.

8. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for their privacy practices.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect data from children.

10. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place.

11. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or through the Service.

12. Contact Us

For privacy-related questions:
Email: privacy@trackflow.io