Privacy Notice

RestoreTrack ("we", "us", "our") provides equipment and inventory management software for restoration contractors. We are the data controller in respect of personal data we process about users of our service.

• Account data: name, email address, hashed password, and the organization you belong to.
• Profile data: display name, role within your organization.
• Usage and telemetry data: pages visited, features used, error logs, device and browser identifiers, IP address.
• Support communications: messages and attachments you send to us.
• Inventory content: equipment, consumables, jobs, and activity records you create in the service. We process this on your behalf as part of providing the service.
• Billing identifiers: a customer ID and subscription ID returned by our payment processor (Paddle). We do not store full payment card details.

• To create and manage your account and provide the service.
• To authenticate users and protect against fraud and abuse.
• To debug, improve, and secure the service.
• To respond to your support requests.
• To send essential service communications (billing, security, important changes).
• To comply with our legal and tax obligations.

We process personal data on the following legal bases: (a) performance of a contractwhen we provide the service to you; (b) our legitimate interests in keeping the service secure, debugging issues, preventing fraud, and improving the product; (c) legal obligation, for example record-keeping for tax and accounting; and (d) consent, where required, for example for non-essential cookies or marketing communications.

• Service providers / subprocessors: hosting, database, email delivery, error monitoring, analytics, and customer-support tooling.
• Merchant of Record: Paddle processes payments, manages subscriptions, handles tax compliance, and issues invoices on our behalf. Paddle's privacy practices are described at paddle.com/legal/privacy.
• Professional advisers (legal, accounting), where reasonably required.
• Authorities, where we are required to do so by law or valid legal process.

We do not sell your personal data.

Your data may be processed in countries outside your own. Where required by law (for example UK or EEA data leaving those regions), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

We keep personal data only for as long as necessary to provide the service and meet our legal obligations. When you close your account, we delete or anonymise account and content data within a reasonable period, except where we must retain certain records for tax, accounting, or legal purposes.

Depending on your jurisdiction, you may have the right to: access your personal data, correct it, delete it, restrict or object to processing, port your data to another provider, and withdraw any consent you have given. You may also have the right to complain to your local data protection supervisory authority. We aim to respond to verified requests within one month.

To exercise any of these rights, contact us via the support channel listed inside the service.

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, encryption at rest where supported by our infrastructure, role-based access controls, and audit logging. No system is perfectly secure; if we ever become aware of a breach affecting your personal data we will notify you and the relevant authorities as required.

We use a small number of essential cookies and similar technologies to keep you signed in and to remember your preferences. We may also use limited analytics cookies to understand how the service is used so we can improve it. Where required by law we will ask for your consent before placing non-essential cookies.

We may update this Privacy Notice from time to time. The "Last updated" date at the top of this page indicates when it was most recently revised.

For any privacy-related questions, contact us via the support channel listed inside the service or by replying to any email we've sent you.