Legal & Trust

The boring details, in plain language.

Last updated: 4 May 2026. If anything here is unclear, email [email protected].

Privacy Policy Terms of Service Data Processing Cookies Advertising Security Trust & compliance Contact

Privacy Policy

Effective: 4 May 2026

This Privacy Policy describes how Tracket ("we", "us", "our") collects, uses and shares information when you visit tracketerp.com or use our services. Tracket processes data on behalf of our customers — we don't sell it, mine it, or train models on it. You own your data; we just store it.

Information we collect

  • Account data you provide directly: name, email address, organisation, billing information.
  • Usage data generated as you use the service: pages visited, features used, timestamps, approximate location derived from IP.
  • Device & log data: browser type, operating system, IP address, referring URL, crash reports.
  • Cookies and similar technologies as described in the Cookies section below.

How we use information

  • To provide, maintain and improve the Tracket service.
  • To process payments and send transactional communications (receipts, security alerts).
  • To detect, prevent and address fraud, abuse and security incidents.
  • To comply with legal obligations.
  • With your consent, to send product updates and marketing communications. You can opt out at any time.

How we share information

We share information only in these limited circumstances: (i) with sub-processors who help us run the service (hosting, payments, email delivery, analytics) under written data-protection agreements; (ii) when required by law or valid legal process; (iii) in connection with a merger, acquisition or sale of assets, with notice to you; (iv) with your explicit consent.

Your rights

Depending on your jurisdiction, you may have the right to access, correct, export or delete your personal data, object to or restrict processing, and withdraw consent. EU/UK residents have rights under the GDPR; California residents have rights under the CCPA, including the right to opt out of "sale" or "sharing" of personal information (we do not sell personal data). To exercise any right, email [email protected].

Data retention & security

We keep personal data only as long as needed for the purposes described above or as required by law. Security measures are summarised in the Security section. No system is perfectly secure; we'll notify affected users without undue delay if a breach occurs.

International transfers

Tracket operates region-locked data residency in the EU, US and APAC. Where data crosses borders, we rely on Standard Contractual Clauses or equivalent safeguards.

Children

Tracket is not directed at children under 16, and we do not knowingly collect their personal information.

Changes

We'll post changes to this policy here and update the "Effective" date. Material changes will be communicated via email or in-product notice.

Terms of Service

Effective: 4 May 2026

By accessing or using Tracket, you agree to these Terms. If you're using Tracket on behalf of an organisation, you represent that you have authority to bind it.

Your account

You're responsible for maintaining the confidentiality of your credentials and for all activity under your account. Notify us immediately of any unauthorised use.

Acceptable use

  • Don't use Tracket to violate any law or third-party right.
  • Don't attempt to disrupt the service, probe for vulnerabilities outside our bug bounty programme, or circumvent rate limits.
  • Don't upload malware, illegal content, or content you don't have rights to.

Subscription & payment

Paid plans are billed in advance on a monthly or annual basis and renew automatically until cancelled. Fees are non-refundable except as required by law. We may change pricing with 30 days' notice.

Content & ownership

You retain ownership of all content you submit ("Customer Data"). You grant Tracket a limited licence to host, process and display Customer Data solely to provide the service. We own the Tracket platform, software, and branding.

Termination

You can cancel anytime from account settings. We may suspend or terminate accounts that violate these Terms. On termination, you can export your data for 30 days, after which it's deleted.

Disclaimers & liability

Tracket is provided "as is" without warranties of any kind. To the maximum extent permitted by law, our aggregate liability is capped at the fees you paid us in the 12 months preceding the claim. We're not liable for indirect, incidental, consequential or punitive damages.

Governing law

These Terms are governed by the laws of India. Disputes will be resolved in the courts of Surat, Gujarat, unless otherwise required by your local consumer protection laws.

Data Processing Agreement

A GDPR-compliant DPA, including Standard Contractual Clauses for international transfers, is available to all paying customers. Counter-signed copies are auto-generated when you upgrade. To request a copy outside that flow, email [email protected].

Cookies

Cookies are small text files that websites place on your device. We use cookies to keep you signed in, understand how the service is used, and — on this marketing website only — to support advertising.

Categories we use

  • Strictly necessary: a session cookie to keep you signed in. Cannot be disabled.
  • Analytics: optional, used to count visits and measure feature usage. You can decline.
  • Advertising: on this marketing site (tracketerp.com), Google AdSense and its partners may set cookies — including the DART cookie — to serve and measure ads based on your visits to this and other sites.

Managing cookies

Most browsers let you block or delete cookies in their settings. You can opt out of personalised advertising at Google Ads Settings or via the industry tools at aboutads.info and youronlinechoices.eu.

Advertising disclosure

This website uses Google AdSense, a third-party advertising service operated by Google LLC. Google and its partners use cookies and similar technologies to serve ads based on your prior visits to this and other websites.

  • Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the Internet.
  • You may opt out of personalised advertising by visiting Google Ads Settings.
  • Third-party vendors and ad networks not controlled by Tracket may also use cookies. Their use is governed by their own privacy policies.
  • For more details on how Google uses information from sites that use its services, see Google's Partner Sites policy and How Google uses advertising cookies.

The Tracket application itself (behind sign-in) is ad-free. Advertising appears only on public marketing pages of tracketerp.com.

Security

Defence-in-depth, with the boring bits done right:

  • AES-256 at rest, TLS 1.3 in transit.
  • Region-locked data residency (EU / US / APAC).
  • Customer-managed encryption keys on Enterprise plans.
  • Independent annual penetration testing.
  • Bug bounty programme with a 24-hour triage SLA.
  • Role-based access control and audit logs for all administrative actions.

To report a vulnerability, email [email protected].

Trust & compliance

Independently audited annually:

SOC-2 TYPE II ISO 27001 ISO 27701 HIPAA / BAA GDPR CCPA

Reports and certificates are available under NDA — request via [email protected].

Contact

Tracket — operated from Surat, Gujarat, India.

  • General: [email protected]
  • Privacy & data requests: [email protected]
  • Security: [email protected]
  • Support: tracketerp.com/contact