Privacy Policy

Track Record ("we", "us") helps professionals privately document their work and prepare for performance reviews. This policy explains what we collect, why, and the control you have over your data. It applies to the Track Record web application operated by [Your Company / Your Name].

1. Who we are

The service is provided by [Your Company / Your Name], [your address / jurisdiction]. For any privacy question or request, contact us at [your-contact-email].

2. What we collect

• Account basics — when you sign in with Google, we receive your name, email address, and profile image. We do not receive your Google password.
• Your content — the check-ins, profile details, competency notes, and reports you create in the app.
• Minimal technical data — standard server logs and a single session cookie needed to keep you signed in.

We do not use advertising trackers, and we do not sell your data.

3. How we use your data

• To provide the service: authenticate you, store your entries, and show your record back to you.
• To generate reports and analyses only when you explicitly request them by pressing a generate/analyze button.
• To keep the service secure and reliable (e.g. rate limits to prevent abuse).

4. AI processing

When you choose to generate a report or analysis, the relevant content from your check-ins for the selected period is sent to our AI provider, Anthropic, to produce the output. Anthropic processes it on our behalf to return your result and per its terms does not use API data to train its models. We send only what is needed for the request, and only when you initiate it. See Anthropic's privacy policy.

5. Where your data is stored

Your content is stored in a managed Postgres database (Neon) and the app is hosted on [your hosting provider, e.g. Vercel]. Data is scoped to your account so other users cannot access it, and all traffic is encrypted in transit (HTTPS).

6. Service providers (sub-processors)

• Google — sign-in / authentication.
• Anthropic — AI report and analysis generation (on request only).
• Neon — database hosting.
• [Vercel / your host] — application hosting.

7. Your rights and controls

• Export — download a full copy of your data anytime with "Export my data" in the app.
• Delete — permanently delete your account and all associated data from the Danger Zone in My Profile. This is immediate and irreversible.
• Depending on where you live (e.g. EEA/UK under GDPR, California under CCPA/CPRA), you may have additional rights to access, correct, or restrict processing of your data. Contact us to exercise them.

8. Data retention

We keep your data until you delete it or your account, after which it is removed from our active systems. Backups, if any, are purged on a rolling basis.

9. Cookies

We use a single essential cookie to maintain your signed-in session. We do not use advertising or third-party analytics cookies.

10. Children

Track Record is intended for working professionals and is not directed to anyone under 16.

11. Changes to this policy

We may update this policy as the service evolves. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice.

12. Contact

Questions or requests: [your-contact-email].