Privacy policy

Who is responsible

TrackFlow is operated by TechGenies LLC, 2100 N Greenville Ave, Richardson, TX 75082, USA. Contact info@techgenies.com for privacy questions or requests.

This policy covers the public website, sales inquiries, account administration, billing, security and support. TechGenies LLC determines the purposes of processing for those activities.

For project information supplied by a customer organization, that organization generally determines why and how the information is used. We process it to provide their workspace under the applicable agreement and instructions. The organization’s own notices also apply.

Information and its sources

We receive names, work email addresses, optional company names and messages when you contact us. Accounts can include names, email addresses, roles, preferences and authentication information. Subscription records include the selected plan, seat count, billing contact, transaction references and subscription status. Payment details are collected by the payment provider used for checkout.

Customer workspaces may contain project tasks, documents, uploaded files, comments, resource profiles, allocations, timesheets, cost rates, budgets, recorded costs and revenue, and personal work notes. The information depends on what customers and their users provide.

Website requests and security processing may involve IP addresses, browser information and request logs. With permission for enabled analytics, we measure public marketing-page visits and selected conversion actions.

Why we use information

We use inquiries to respond to your request and discuss the service. We use account and billing information to deliver the agreed service, manage the relationship and meet applicable legal obligations. We use appropriate technical information to protect access, prevent abuse and troubleshoot problems.

Where UK or EU data-protection law applies, the basis depends on the activity: contractual necessity or requested steps before a contract, legitimate interests assessed against your rights, legal obligations, or consent for optional website analytics.

Submitting the contact form does not subscribe you to marketing emails. Cookie choices are separate from agreeing to service terms. We do not treat silence or continued browsing as analytics permission.

Optional analytics

Google Analytics 4 is loaded only if it has been configured and enabled, and this browser permits it. Until then, no Google analytics tag is loaded. Cookie settings explains the current status.

The integration measures public marketing pages and selected pricing, contact and plan-interest actions. It uses fixed page titles, page addresses without query strings or fragments, and only an external referring-site origin where available. Google also receives technical connection and device information that can support approximate geographic reporting.

Project pages, documents, timesheets, financial records, account identifiers, checkout-session identifiers and contact-form contents are excluded. Advertising storage, Google signals and advertising-personalization signals are disabled. No advertising pixels, heatmaps or session recording are installed by this integration.

You can reject optional analytics or withdraw permission in Cookie settings. We honor Global Privacy Control by keeping this optional analytics off. Necessary site and security requests still occur.

Who receives information

Authorized TechGenies personnel and service providers may handle information for hosting, files, database services, email, support and payment processing. Contact inquiries are delivered through the configured email provider to our sales mailbox. Google receives consented analytics data; Stripe receives payment and subscription information when configured checkout is used.

Configured Microsoft Entra sign-in exchanges information needed to authenticate with the customer’s identity provider. Other connected services receive information only for the configured functions. Future AI features will require their own data-handling review and notices before activation.

We may disclose information to meet lawful requests, establish or defend rights, or support a business transaction with appropriate protections. The website analytics described here is not configured to sell personal information or share it for cross-context behavioral advertising. Ask our privacy contact for the providers applicable to your deployment.

International processing

Providers or authorized personnel may process information outside your country. Actual locations depend on the selected deployment and service providers. Where required, applicable transfer safeguards must be established. Contact us for the locations and arrangements relevant to your data; this policy does not itself establish a transfer mechanism.

How long information is kept

Retention depends on the record’s purpose, active account or inquiry, contractual instructions, applicable financial and legal requirements, security needs and dispute resolution. Customer project data is subject to the customer’s instructions and applicable deletion and backup arrangements.

Cookie choices last up to 180 days. Analytics cookies are configured for a 90-day expiry without extending it on every interaction. Before activating GA4, event and user data retention must be set to two months; aggregated reports may follow different rules.

Contact us about deletion or the retention arrangements for your deployment. Closing an account does not automatically remove records that must be retained by law.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion or a copy of information, restrict or object to processing, and withdraw consent. Some rights have exceptions. We may request proportionate verification before responding.

US state laws may provide applicable rights to opt out of sale, sharing or targeted advertising, limit certain sensitive-information uses, or appeal a decision. Coverage depends on the law’s thresholds and requirements. We will not unlawfully discriminate for exercising rights.

UK and EEA residents can complain to the ICO or their local supervisory authority. Canadian residents can contact the Office of the Privacy Commissioner of Canada or the appropriate provincial regulator. Australian residents can complain to us and, where applicable, the Office of the Australian Information Commissioner.

Email info@techgenies.com with “TrackFlow privacy request”. Identify the relevant account or organization without sending a password, government ID, confidential document or full project export. If the request concerns an employer’s workspace, contact that organization first.

Children and updates

TrackFlow’s public website and business-account services are intended for adults acting in a professional capacity. Contact us if you believe a child’s information has been supplied inappropriately.

We update this notice when relevant practices change and display the revision date. Material changes may require further notice or a new consent choice.