Last updated: March 26, 2026
Account data: email address, name, hashed password, organization name, and billing information processed through Stripe. Usage data: brands you create, keywords you track, alert settings, and dashboard interactions. Mention data: publicly available content from social media, news, forums, and review sites that matches your tracked keywords.
We use your data to provide the Tracky service, run AI analysis on mentions, generate reports, and send alert notifications. We use aggregated usage data to improve the Service and fix bugs. We do NOT sell your personal data to third parties. We do NOT use your data for advertising purposes.
We use the following third-party services to operate Tracky: Stripe (payment processing), Supabase (database hosting), Anthropic Claude API (AI analysis of mention text), Resend (transactional email delivery), Vercel (application hosting), and Sentry (error tracking). Each service has its own privacy policy governing how they handle data.
Tracky uses essential cookies only for authentication and session management. We do not use advertising cookies. We do not use third-party tracking cookies. You can disable non-essential cookies in your browser settings without affecting core functionality.
Your data is retained while your account is active. After subscription cancellation, data is retained for 30 days. After account deletion, data is permanently removed within 7 days.
You have the right to: access your personal data, request correction of inaccurate data, request deletion of your data (right to be forgotten), export your data in a machine-readable format, and object to processing of your data. To exercise these rights, contact privacy@usetracky.com or use the "Delete My Account" option in your account Settings.
You can delete your account using the "Delete My Account" option in Settings. There is a 7-day grace period during which deletion can be reversed. After 7 days, the following data is permanently removed: your user account, organization, all brands, all mentions, all reports, and all settings. A confirmation email is sent when deletion is complete.
We implement the following security measures: all connections use HTTPS encryption, passwords are hashed using bcrypt, database access is restricted with role-based permissions, error tracking through Sentry uses anonymized data, and production database access is limited to essential personnel only.
Tracky is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will delete it promptly.
Material changes to this Privacy Policy will be communicated via email with at least 30 days' notice. Minor changes (clarifications, formatting) may be posted with an updated date without prior notice.
For privacy-related inquiries: privacy@usetracky.com. For general support: support@usetracky.com.