Privacy Policy

Trackr ("we", "our", or "us") operates a project tracking and analytics platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

By using Trackr, you agree to the collection and use of information in accordance with this policy.

Account Information

When you create an account, we collect your email address and a hashed password, managed securely through Supabase Auth.

Project and Work Log Data

We store the project entries, tasks, tags, and notes you create. This data is private to your account and protected by row-level security.

Google OAuth Data

If you connect your Google account, we store OAuth access and refresh tokens in order to retrieve data from Google Analytics 4, Google Search Console, and Google Ads on your behalf. We store only the tokens and the property/site identifiers you configure. We do not store raw Google Analytics or Search Console data beyond temporary caches in the metrics_snapshots table, which you can delete at any time.

The Google data we access is limited to:

• Google Analytics reporting data (read-only)
• Google Search Console query and page performance data (read-only)
• Google Ads campaign metrics (read-only)

AI Conversation Data

Messages you send to the AI agent are stored in our database to provide conversation history. These messages are private to your account and project.

Usage Data

We may collect standard server logs including IP addresses, browser type, and pages visited for security and debugging purposes.

• To provide and maintain the Trackr service
• To authenticate you and secure your account
• To fetch Google Analytics, Search Console, and Ads data on your behalf when you use the AI agent or Stats tab
• To store and display your project data
• To improve the service

We do not sell your data. We do not use your data for advertising.

Trackr's use of Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We use Google data only to provide the features described in this application (project analytics and AI-assisted insights).
• We do not transfer Google user data to third parties except as necessary to provide the service.
• We do not use Google data for advertising.
• We do not allow humans to read your Google data unless you explicitly share access or we are required by law.

You can revoke Trackr's access to your Google account at any time via Google Account Permissions or by disconnecting in the Integrations tab.

Your data is stored in Supabase (PostgreSQL) with row-level security policies ensuring users can only access their own data. Connections are encrypted via HTTPS/TLS.

OAuth tokens are stored encrypted at rest. Metrics snapshots are stored per-project and are only readable by the project owner.

We retain your data for as long as your account is active. You may delete your account and all associated data at any time by contacting us. Metrics snapshots can be cleared by disconnecting your Google integration.

We use the following third-party services:

• Supabase — database and authentication hosting
• Vercel — application hosting
• Anthropic Claude API — AI chat functionality
• Google APIs — Analytics, Search Console, Ads data
• Perplexity API — AI citation tracking (optional)

You have the right to:

• Access the data we hold about you
• Request deletion of your data
• Export your project data
• Revoke third-party (Google) access at any time

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page.

If you have questions about this Privacy Policy, please contact us at the email address associated with your Trackr account, or through the contact information on our homepage.