Privacy Policy

We collect information you provide directly to us when you create an account, use the Service, or communicate with us. This may include:

• Account Information: Name, email address, password, organization name, and role.
• Asset Data: Information about assets, licenses, consumables, and related records you enter into the Service.
• Usage Data: Information about how you use the Service, including pages visited, features used, and actions taken.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies and Tracking: We use cookies and similar technologies to maintain your session, remember preferences, and analyze usage patterns.

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process transactions and send related information, including confirmations and invoices.
• Send you technical notices, updates, security alerts, and support messages.
• Respond to your comments, questions, and customer service requests.
• Monitor and analyze trends, usage, and activities in connection with the Service.
• Detect, investigate, and prevent fraudulent transactions and other illegal activities and protect the rights and property of Track Star EAM and others.

We take reasonable measures to help protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit (TLS 1.3) and of stored credentials and integration secrets at rest (AES-256).
• Automated security testing on every release, covering tenant isolation, permission enforcement, and access to administrative functions.
• Role-based access controls, with every administrative action written to an audit trail.
• A nightly backup of the database, retained for fourteen days, with restores tested from the stored copy rather than assumed.

Your data is stored in data centers located within the United States. We do not replicate customer data outside the United States. Our infrastructure providers maintain their own third-party security certifications; we will provide current documentation on request.

We may share information with third-party service providers that perform services on our behalf, such as:

• Cloud hosting and infrastructure providers.
• Payment processors for billing and subscription management.
• Analytics services to understand Service usage and improve performance.
• Email delivery services for transactional and notification emails.
• Customer support tools for managing support requests.

These third parties are contractually obligated to use your information only as necessary to provide their services to us and are required to maintain the confidentiality and security of your information.

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). These include the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data under certain circumstances.
• Restriction: Request restriction of processing of your personal data.
• Portability: Request transfer of your personal data to another service.
• Objection: Object to the processing of your personal data for certain purposes.

To exercise any of these rights, please contact us at the email address provided below. We will respond to your request within 30 days.

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain information by law or for legitimate business purposes such as fraud prevention.

Aggregate, anonymized data that cannot be used to identify you may be retained indefinitely for analytical and statistical purposes.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

For EEA residents, you also have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.