Privacy policy

This policy explains what personal data Trakinit (“we”, “us”) handles when you use trakinit.com and the Trakinit service, and why. Trakinit is business software: our customers are businesses that use it to measure their marketing.

Two kinds of data

• Account data. Information about our customers and their team members, which we control.
• Customer data. Marketing and sales data our customers send us about their own website visitors and buyers. We process it on our customers’ behalf and only on their instructions. The customer is responsible for telling its visitors and buyers about it. If you are one of their visitors or buyers, contact that business first; we will help them respond.

Account data we collect

• Name, work email, job title and workspace name when you sign up or are invited.
• Your password, stored only as a one-way hash.
• Billing details, handled by Stripe. We never see or store your full card number.
• Product usage and support messages, used to run and improve the service.

Customer data we process

When a customer installs the Trakinit tracking snippet or connects a sales or ad platform, we process:

• Visit data: the landing page address, referrer, campaign parameters (UTMs) and ad click IDs, the browser’s user agent and language, and approximate country and region.
• A shortened IP address. We drop the last part before storing it, so it identifies a network, not a device.
• Email addresses only in hashed form. The snippet converts emails to a SHA-256 hash in the visitor’s browser before anything is sent to us. Emails in order imports and connected stores are hashed as soon as we receive them and are never stored in plain form.
• Sales data: order totals, dates, products and platform, from the stores and files the customer connects.
• Ad spend and campaign data from connected ad accounts. Access tokens are encrypted at rest.

The tracking snippet doesn’t set cookies or use device fingerprinting libraries. It matches visits to sales using click IDs, hashed emails and a salted hash of network and browser details.

How we use data

• To provide the service: match marketing touchpoints to sales and produce reports for the customer who owns the data.
• To bill customers, send account and billing emails, and give support.
• To keep the service secure and prevent abuse.

We don’t sell personal data, share it for cross-context advertising, or use one customer’s data in another customer’s reports.

Service providers

We share data only with providers that help us run Trakinit, under contracts that limit how they use it:

• Vercel (hosting) and Neon (database), in the United States.
• Stripe (payments and billing).
• Anthropic, which powers the “Ask Trakinit” assistant. When you ask a question, the relevant report data from your workspace is sent to generate the answer.
• Resend (email delivery), and Slack, if you connect it.
• Crisp (support chat), if you use the chat in the help menu.

We may also disclose data if the law requires it, or as part of a merger or acquisition, in which case this policy continues to apply.

Cookies

The Trakinit dashboard uses one essential cookie to keep you signed in, and your browser’s local storage to remember your light or dark theme. We don’t use advertising cookies.

Retention

We keep account and customer data while a workspace is active. A workspace is closed when its subscription is canceled, when its free trial ends without a subscription, or when an admin asks us to delete it at support@trakinit.com. We automatically delete a closed workspace and all of its data within 30 days, along with the accounts of team members who don’t belong to another workspace. Resubscribing before then reopens it. Billing records held by Stripe are kept as tax and accounting law requires.

Security

Data is encrypted in transit with TLS. Integration tokens are encrypted at rest, passwords are hashed, and access to customer data is limited to the workspace that owns it.

Your rights

Depending on where you live, including under the GDPR and California law, you may have the right to access, correct, delete or export your personal data, and to object to or limit some processing. To make a request about your account data, email support@trakinit.com. We respond within 30 days and won’t treat you differently for exercising your rights.

International transfers

Trakinit is operated from the United States, and data is processed there. Where the law requires it, we use appropriate safeguards, such as standard contractual clauses, for transfers.

Children

Trakinit is for businesses and isn’t directed at children. Customers agree not to send us data about children under 16.

Changes

We will post updates here and change the date above. For material changes, we notify account admins before they take effect. See also our terms of service.

Contact

Privacy questions or requests: support@trakinit.com.