Privacy Policy

What we collect

When you create an account we collect your email address and the password you set. Passwords are handled by our authentication provider and are stored hashed — Track & Bill never sees or stores your password in readable form.

When you use the product you create business records: your company details, your clients and their details, jobs, time entries and their notes, mileage, expenses, purchase orders, retainer ledgers and invoices. In a team account, time entries record which member logged them.

If you use the optional “Start drive / End drive” feature to measure mileage, the app reads your device’s GPS location to calculate the distance of the trip. The coordinates stay on your device — only the resulting mileage figure is saved to your records. Location is requested only when you tap Start drive, and you can always enter mileage by hand instead. If you use the Arrived / Left visit notices (house cleaning), the app reads your location at the moment you tap and includes an approximate check-in location in the email sent to that client; location is requested only at the tap, and if you decline the notice still sends without it. We do not collect your contacts or your photos, and we collect nothing else from your device beyond what you type into the app.

When you send a client an electronic rate agreement and they sign it, we record the name they type, the date and time, and the signer’s IP address, as the record of their acceptance.

How we use it

Your business records exist to run the product: to show you your data, to generate invoices, and to keep your team account working. We do not use your data to build advertising profiles, and we do not sell it.

We use your email address to send account email — password resets, confirmations, and notices about the service.

Where your data lives

Data is stored in a Postgres database hosted by Supabase in the United States (AWS us-west-2 region).

Each company’s data is isolated at the database level using row-level security keyed to company membership — the separation is enforced by the database itself, not only by the interface.

Payments

When your clients pay you, they pay through your own Stripe account. Track & Bill generates the invoice and the payment link, but the money moves between your client and you. We never hold or process your clients’ payments, and we do not receive their card details.

If you subscribe to a paid Track & Bill plan, that payment is processed by Stripe. We do not store your card number — Stripe does. Stripe’s handling of that data is governed by Stripe’s own privacy policy.

The invoice badge

Invoices you send carry a small footer line reading “Invoice your clients with Track & Bill”, linking to this website. The link carries campaign parameters so we can tell how many people arrived from an invoice. It identifies the invoice as the source — it does not identify you or your client to us, and it does not track your client after they leave.

Team accounts can switch the badge off in settings.

This website

This marketing site sets no advertising cookies and runs no third-party tracking scripts. If you arrive from an invoice badge link, the campaign parameters in the URL are kept in your browser’s session storage so they survive to the signup link. They are discarded when you close the tab and are never linked to your identity.

Your data, your control

You can export all of your company’s data, including the retainer ledger, at any time with one click from inside the app.

You can delete your account from inside the app, with a typed confirmation. Deleting your account removes your login and your memberships. Where a company has other owners, that company’s business records remain with them — your departure does not delete their books. A sole owner with an active team is prevented from deleting in a way that would orphan the team.

To ask what we hold about you, or to ask us to delete it, email skrubinski@tuninglabs.net.

How long we keep it

Your business records are kept for as long as your account is active, because they are your books — invoices and ledgers usually need to be retained for tax and accounting purposes on your side.

When you delete your account we remove your login and memberships. Backups may retain copies for a limited period before they age out.

Children

Track & Bill is a business tool and is not directed at children. We do not knowingly collect data from anyone under 13.

Changes to this policy

If we change this policy materially we will update the date at the top of this page and, where the change affects how we handle your data, tell account holders by email.

Contact

Questions about this policy or your data: skrubinski@tuninglabs.net.