Privacy Policy

1. Who we are

Tracksee (“Tracksee”, “we”, “us”) is a point of sale and inventory system operated by Fahath Richvi in Sri Lanka. For anything about this policy or your data, contact us at fahathrichvi7@gmail.com or +94 75 733 1052.

2. What we collect

Account details

• Your name, email address and, if you add them, phone number and profile photo link.
• Your password, stored only as a secure one-way hash by our authentication provider. We never see or store it in readable form.
• If you choose Continue with Google, Google shares your name, email address and profile picture with us so we can create and sign in to your account. We do not receive your Google password or access to your Gmail, contacts or files.

Business details

• Your business name, branches, address, phone, currency and settings.
• Everything you enter to run your shop: products, prices, stock, sales, purchases, suppliers, expenses, registers, staff accounts and reports.
• Your customers' details if you record them (for example name, phone, credit balance). For this data, you decide what is collected and why; we store and process it only to provide the service to you (see section 6).

Billing

• Your plan, subscription dates and plan requests, and payments we record after you pay by bank transfer (amount, date and transfer reference). We do not collect or store card numbers.

Reviews and messages

• Reviews you submit about Tracksee, and messages you send us by WhatsApp, phone or email.

Technical data

• Basic logs needed to run and secure the service, such as IP address, browser type and the time of requests.
• An activity log inside your business recording which user did what (for example, who completed a sale), so you can audit your own staff.

3. How we use it

• To create your account, sign you in and keep your account secure.
• To provide Tracksee Online: storing your business data and showing it to the users you allow.
• To manage your free trial, plan requests, subscriptions and desktop licences.
• To send service emails: account confirmation, password resets and important notices about your account. We do not send marketing emails unless you ask us to.
• To answer support questions and fix problems.
• To publish reviews you submit, only after you send them and we approve them.
• To comply with the law and protect our users and service from fraud and abuse.

We process your data because it is necessary to provide the service you signed up for, to meet legal obligations, or for our legitimate interest in running a secure and reliable service. Where we rely on your consent, such as publishing your review, you can withdraw it at any time.

4. Who we share it with

We do not sell your personal data and do not share it for advertising. We use a small number of service providers who process data on our behalf, only to run Tracksee:

• Supabase: database, file storage and sign-in (authentication).
• Vercel: hosting of the website and web app.
• Resend: delivery of account emails such as confirmations and password resets.
• Google: only if you choose to sign in with Google.
• GitHub: hosts the desktop app installer you download.

These providers may store data on servers outside Sri Lanka. Where data is transferred abroad, we rely on providers that apply appropriate security safeguards. We may also disclose data if required by law or a valid request from a public authority.

5. The desktop app

The Tracksee desktop app stores your business data on your own computer. We do not receive or have access to that data. When you buy a licence, you send us your computer's Device ID so we can issue a licence key for that computer. The app may connect to the internet to check for free updates.

6. Your customers' data

When you record information about your own customers, suppliers or staff in Tracksee Online, you are responsible for having a lawful reason to do so and for meeting your obligations to them. We act on your instructions: we store and process that data only to provide the service to you, and do not use it for our own purposes.

7. How long we keep it

• Account and business data: for as long as your account is active.
• After your account is closed or your subscription ends, we keep your business data for a reasonable period so you can come back or ask for an export, then delete it, unless we must keep certain records for legal, tax or accounting reasons.
• Payment records: as long as needed for accounting and tax law.

8. Security

Data is encrypted in transit (HTTPS). Access to each business's data is restricted at the database level to that business's own users, and each staff member sees only what their role allows. No system is perfectly secure, so please use a strong password and keep it private. If we become aware of a breach affecting your data, we will notify you as required by law.

9. Cookies and browser storage

We use only essential cookies, which keep you signed in, and your browser's local storage to remember preferences such as light or dark theme. We do not use advertising or third-party tracking cookies.

10. Your rights

Under Sri Lanka's Personal Data Protection Act, No. 9 of 2022, and similar laws, you may have the right to:

• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• ask us to delete your data or close your account;
• withdraw consent where we rely on it;
• object to or ask us to restrict certain processing.

You can update your name and phone number from Profile inside the app. For anything else, email fahathrichvi7@gmail.com. We will respond within a reasonable time and may need to verify your identity first. You may also complain to the Data Protection Authority of Sri Lanka.

11. Children

Tracksee is a business tool and is not intended for anyone under 18.

12. Changes to this policy

We may update this policy. We will change the date at the top and, for significant changes, let you know by email or in the app.

13. Contact

Fahath Richvi, Tracksee, Sri Lanka · fahathrichvi7@gmail.com · +94 75 733 1052. See also our Terms of Service.