Introduction

Track and Invoice ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service for tracking time, billing products and purchases, and sending invoices.

By using Track and Invoice, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect information such as your name, email address, and profile picture through your authentication provider.

Business Data

We store the data you enter into the service, including:

• Client information (names, contact details, addresses)
• Project and task details
• Time entries and descriptions
• Invoice information and line items
• Company and team member information
• Expense and item records

Payment Information

When you use our payment collection features, payment transactions are processed by Stripe, Inc. Track and Invoice does not store credit card numbers or bank account details on our servers. Stripe's privacy policy governs the handling of payment data. By enabling payment collection, you authorize us to transmit the necessary information to Stripe on your behalf to complete transactions.

Usage Information

We collect information about how you access and use the service, including your IP address, browser type, device information, and pages visited. We also use analytics tools to understand how users interact with the service (see Cookies and Tracking below).

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage your account
• Send you technical notices and support messages
• Respond to your comments and questions
• Protect against fraudulent or unauthorized activity
• Comply with legal obligations

Data Sharing and Disclosure

We will never sell, rent, or share your personal information or business data with third parties for their marketing purposes.

We may share your information only in the following circumstances:

• With your consent: When you explicitly authorize us to share information
• Service providers: With trusted third-party service providers who assist in operating our service, bound by confidentiality agreements. These include:
  • Supabase: database hosting and storage
  • Railway: application hosting and infrastructure
  • Cloudflare: file storage and content delivery
  • Stripe: payment processing
  • Resend: transactional email delivery (including invoice emails sent on your behalf)
• Legal requirements: When required by law, subpoena, or other legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets, with continued protection of your data

Email Delivery

When you send invoices or other communications through Track and Invoice, recipient email addresses are transmitted to our email delivery provider (Resend) solely for the purpose of delivering those messages. We do not use recipient email addresses for any other purpose.

Support Access

As the operator of Track and Invoice, we may access your account for purposes of customer support, troubleshooting, and service maintenance. Any such access is logged and limited to what is necessary to resolve the issue. We do not access your account data for commercial purposes or share it with third parties outside of the circumstances described in this policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Secure database storage with access controls
• Regular security assessments and updates
• Multi-tenant data isolation to ensure your data is kept separate from other organizations

Your data is stored and processed in the United States. If you access our service from outside the United States, your use of the service constitutes consent to the transfer and processing of your information in the United States.

Data Retention

We retain your data for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us. Some information may be retained as required by law or for legitimate business purposes.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request a machine-readable copy of your data
• Objection: Object to certain processing of your data

To exercise these rights, please contact us using the information provided below.

Cookies and Tracking

We use essential cookies to maintain your session and remember your preferences. We do not use third-party advertising cookies.

We use the following analytics tools to help us understand and improve the service:

• Google Analytics: tracks aggregate page traffic and usage patterns on our marketing site
• PostHog: tracks in-app behavior and usage patterns, and may record session activity to help us identify and fix usability issues

Data collected by these tools is used solely to improve Track and Invoice and is not shared for advertising purposes.

Children's Privacy

Our service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at legal@trackandinvoice.com.