Privacy Policy

1. Information We Collect

We collect information you provide directly (name, email, payment details) and information collected automatically (IP addresses, device information, usage data, cookies).

2. How We Use Your Information

We use your information to provide the Service, process payments, communicate with you, detect fraud, and improve the platform.

3. Data Sharing

We share data with: payment processors (Stripe), email providers (AWS SES), and as required by law. We do not sell your personal data to third parties.

4. Data Retention

We retain your personal data for as long as your account is active. Financial records (commissions, payouts) are retained for 7 years for tax compliance. Upon account deletion, personal data is anonymized within 30 days.

5. Your Rights (GDPR / CCPA)

You have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data (“right to be forgotten”)
• Portability — receive your data in a machine-readable format
• Object — opt out of certain data processing

To exercise these rights, use the data request feature in your account settings or contact privacy@trackingmd.com.

6. Cookies

We use essential cookies (session management, CSRF protection) and optional analytics cookies. You can manage cookie preferences via the consent banner.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits.

8. International Transfers

Data is stored in the United States (AWS us-east-2). For EU users, we rely on Standard Contractual Clauses for lawful data transfer.

9. Changes to This Policy

We will notify you of material changes via email and require re-acceptance before continued use.

10. Contact

Privacy inquiries: privacy@trackingmd.com