Legal

Privacy Policy

Last updated: October 2026

1. Introduction

TrackElf ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website and services.

2. Information We Collect

Account information: When you register, we collect your name, email address, and password. Passwords are stored using bcrypt hashing — we never store plain-text passwords.

Inventory data: We store the inventory information you enter, including brand names, models, quantities, purchase dates, and costs. This data is associated with your account and store(s).

Usage data: We collect basic analytics such as pages visited, features used, and device type. This helps us improve the service.

Payment information: We do not store your credit card details. All payments are processed securely through Stripe.

3. How We Use Your Information

  • To provide and maintain our inventory tracking service
  • To send expiry alerts and important account notifications
  • To process payments and manage subscriptions
  • To improve our product and user experience
  • To comply with legal obligations

4. Data Storage & Security

Free plan: Your inventory data is stored locally on your device using browser localStorage. This data never leaves your device unless you choose to export it.

Pro & Business plans: Your data is stored in encrypted cloud databases. We use industry-standard encryption (TLS/SSL) for data in transit and at rest.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share data with:

  • Service providers: Stripe (payments), email delivery services, and cloud hosting providers who help us operate the service
  • Legal requirements: When required by law or to protect our rights and safety

6. Your Rights

Under GDPR and UK data protection law, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing of your data
  • Data portability (export your data in CSV format)
  • Withdraw consent at any time

To exercise these rights, contact us at [email protected].

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will permanently delete your personal data and inventory within 30 days, except where we are required to retain data for legal or accounting purposes.

8. Cookies

We use essential cookies to maintain your login session and remember your preferences. We do not use tracking cookies for advertising. For more details, see our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The "Last updated" date at the top indicates when this policy was last revised.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].