Privacy policy

Last updated: October 27, 2026

Who is responsible

Company Tracker ("we", "us") operates companytrackerapp.xyz and is the controller of the personal information described here. Contact us about privacy at support@companytrackerapp.xyz.

Information we collect about our customers

• Account information: your name, work email, company name, password (stored only as a secure hash) and the role of each user. We use it to create and secure your account and to communicate with you about the service. Basis: performing our contract with you.
• Billing information: your plan, subscription status and Paddle customer and transaction IDs. Card and payment details are collected and processed by Paddle, not by us. Basis: contract and legal obligations.
• Workspace content: notes, call outcomes, statuses, follow-up dates and other information your team adds. We use it only to provide the service to you. Basis: contract.
• Technical data: log data such as IP address, browser type, pages requested and error information, used to operate, secure and fix the service. Basis: our legitimate interest in running a secure service.
• Messages you send us: emails and contact requests, used to answer you. Basis: legitimate interest and, where relevant, contract.

Carrier information in the service

Leads in Company Tracker are U.S. motor carriers. Their details, such as company name, USDOT number, business address, phone number, email and fleet size, come from public U.S. Department of Transportation / FMCSA records. We process this business contact information to provide our customers with a prospecting tool, based on our legitimate interest and theirs in business-to-business outreach. If you represent a carrier and want your record removed or corrected, email support@companytrackerapp.xyz with your USDOT number.

Who we share information with

We do not sell personal information. We share it only with service providers that help us run Company Tracker, under contracts that require them to protect it:

• Paddle.com, our Merchant of Record, for checkout, payments, invoices, taxes and refunds;
• Railway, for application hosting and data storage;
• Resend, for sending account and transactional emails;
• Google Fonts, to deliver the fonts on our website;
• professional advisers, and authorities when the law requires it.

Some of these providers process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Cookies

We use only the cookies needed to run the service, such as a session cookie that keeps you signed in and protects forms. We do not use advertising or tracking cookies. Paddle's checkout may set its own cookies to process payments securely.

How long we keep information

We keep account and workspace data while your subscription is active. After an account is closed, we delete or anonymize it within 90 days, except billing records we must keep for tax and accounting purposes, and backups, which are overwritten on a rolling basis.

Security

We use encrypted connections (HTTPS), hashed passwords, separated customer workspaces and access controls to protect information. No online service can be perfectly secure, but we work to protect your data and will notify you of a breach where the law requires it.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent where we rely on it. To use these rights, email support@companytrackerapp.xyz. We respond within one month. If you are in the EU, the UK or Serbia, you can also complain to your local data protection authority.

Changes

We may update this policy. We will post the new version here and update the date above, and tell you by email about significant changes.