PRIVACY POLICY

Privacy Policy

Last updated: December 1, 2025

This Privacy Policy describes how TrackBranded (“we,” “us,” “our”) collects, uses, discloses, and protects your personal data when you use our Service. It applies to all users of our Site and Services.

1. Controller / Contact Information

  • Data Controller: TrackBranded (operated by Global X MGT LLC)

  • Contact for Privacy Requests: [email protected]

  • If applicable (e.g. for EU data subjects), you may designate a Data Protection Officer (DPO) or representative; contact us at the email above for details.

  • This policy — together with our Terms of Service and Data Processing Addendum (DPA) — governs how we handle personal data.

2. What Information We Collect & When

We collect the following categories of information:

A. Information You Provide Directly

  • Name, email address, password or authentication credentials

  • Company, workspace, or business-related information (if applicable)

  • Account configuration, settings, preferences, profile info

  • Transaction / billing metadata (user ID, invoice/receipt data) — note: full card numbers are not stored by us (billing handled by third-party providers).

B. Automatically Collected / Usage Data

  • IP address, approximate geolocation (e.g. country), browser / device / OS metadata

  • Session and usage logs (timestamps, feature usage, service interactions, link clicks, redirects)

  • Performance and analytics data (link/campaign metrics, click rates, UTM parameters, referrers, user-agent info)

  • Cookies, tracking technologies, local storage, and similar tools for analytics, authentication, preferences, performance, etc.

C. Cookies & Tracking / Third-party Services

We use cookies and similar technologies to:

  • Maintain login sessions, authentication, and security

  • Provide and improve the Service (performance, UX, analytics)

  • Understand usage patterns, for analytics purposes, usage metrics, and site optimization

  • Optionally, marketing, communication, or user-engagement tracking (if and when enabled — see separate consent/opt-in)

Cookies or tracking may come from our third-party service providers (analytics, hosting, monitoring, payment, etc.).

3. Why & How We Use Your Data (Purposes)

We process personal data for the following purposes:

  • To provide, maintain, and operate the Service (account management, authentication, subscription billing, access control, feature delivery) — necessary for contract performance.

  • To process payments, manage billing cycles, handle invoicing and payment disputes (through payment processors).

  • To analyze usage, monitor performance, collect metrics (e.g. click / redirect / campaign analytics), and improve the Service.

  • To provide customer support, respond to inquiries, communicate important updates, changes, or legal notices.

  • To detect, prevent, and combat fraud, abuse, security breaches, and other harmful or illegal activity — legitimate interest.

  • To comply with legal, regulatory or tax obligations (e.g. transaction records, audit logs).

  • Where consent is obtained (e.g. for marketing communications, newsletters, optional tracking), we may use data for communications, promotions, product updates — only if the user opts in.

4. Legal Bases & Compliance

  • For users in jurisdictions under data-protection laws (e.g. EU/EEA under General Data Protection Regulation — GDPR), we rely on lawful bases including: contract performance (service delivery & billing), legitimate interest (fraud prevention, analytics, security), and consent (for optional marketing or tracking cookies). 

  • We adopt a “privacy-by-design & by-default” approach in our data-handling practices. 

  • We are committed to complying with applicable global data-privacy laws (GDPR, CCPA/CPRA for U.S. users, other regional laws as applicable). 

5. Sharing and Disclosure of Data

We do not sell your personal data.
We may share or disclose data as follows:

  • To third-party service providers required to support the Service: payment processors (e.g. Paddle, Stripe), hosting providers, analytics vendors, infrastructure / security / backup services, monitoring services — limited to data necessary for them to perform their function.

  • To comply with lawful requests, subpoenas, legal processes, regulatory compliance, or to respond to lawful government requests.

  • To protect rights, property, safety of TrackBranded, its users, or the public — for fraud prevention, security, abuse prevention, and to respond to claims.

  • In case of business transfer (sale, merger, acquisition) — insofar as permitted by applicable law — with notice to users and subject to confidentiality and data-protection obligations.

Any third-party recipients will be required to adhere to data-protection standards at least as protective as ours (e.g. via data processing agreement or equivalent). 

6. Data Retention & Deletion

  • We retain your data only as long as necessary to provide the Service, fulfill contractual obligations (billing, support, compliance), or as required by law (e.g. record-keeping, tax).

  • When you request account deletion, cancel subscription, or when your data is no longer needed, we will delete or anonymize your personal data, including backups, unless retention is required by law.

  • You (or your authorized representative) may request: data export, deletion, correction, or restriction of processing at any time (see Section 7).

7. User / Data-Subject Rights & How to Exercise Them

Depending on your jurisdiction and applicable law, you have certain rights regarding your personal data, including:

  • Right to access your personal data

  • Right to rectification / correction of inaccurate or incomplete data

  • Right to deletion (“right to be forgotten”), subject to legal or contractual constraints

  • Right to data portability / export — ability to get your personal data in a common, machine-readable format

  • Right to restrict or object to processing (where lawful basis other than contract performance)

  • Right to withdraw consent for optional processing (e.g. marketing, cookies) without affecting contract-based services

  • Right to lodge a complaint with a supervisory authority (if applicable)

To exercise any of these rights, send a request to [email protected]. We will aim to respond within applicable legal timeframes (e.g. GDPR: one month). 

8. Cookies, Tracking & Consent

  • We use cookies and similar technologies for essential functionality (login sessions, authentication), analytics, service improvement, performance, and optional features (with consent).

  • Where required (e.g. EU/EEA, CCPA/CPRA), we will obtain explicit user consent before deploying non-essential cookies (analytics, tracking, marketing). 

  • You may manage cookie preferences (accept/deny non-essential cookies), and opt-out of optional tracking.

  • Disabling non-essential cookies may affect certain features or analytics.

9. Data Security & Protection

  • We implement and maintain industry-standard technical and organizational security measures to protect personal data (encryption, access controls, secure storage, least-privilege access, regular security reviews) — to the extent feasible. 

  • We limit access to personal data to authorized personnel and sub-processors bound by confidentiality obligations.

  • In case of a data breach or security incident affecting personal data, we commit to notify affected users and take appropriate remedial steps, in compliance with applicable laws.

10. International Transfers & Cross-Border Data Handling

  • Because TrackBranded provides services globally, data may be transferred to or processed in jurisdictions outside your home country. We, and our sub-processors, implement appropriate safeguards — such as Standard Contractual Clauses (SCCs) or equivalent mechanisms — for cross-border data transfers, where required by law. 

  • If additional safeguards or consents are required under local law, we will notify you or obtain necessary consent.

11. Minors & Age Requirements

  • Our Service is intended for users 18 years or older (as stated in our Terms of Service). We do not knowingly collect personal data from minors. If you become aware a minor submitted data, please contact us, and we will take steps to delete the data.

12. Changes to Privacy Policy & How We'll Notify You

  • We may update this Privacy Policy from time to time (e.g. to reflect changes in laws or our practices).

  • When we make material changes, we will update the “Last updated” date, and — where required — notify you (e.g. via email or prominent notice).

  • Continued use of the Service after changes means you accept the updated policy.

13. International & Jurisdictional Compliance & Data Protection Commitment

  • We recognize that privacy laws vary across jurisdictions (GDPR in EU/EEA, CCPA/CPRA in California / U.S., other regional laws). Where required, we will comply with applicable legal obligations in your region.

  • We adopt a “privacy-by-default / by-design” philosophy — limiting data collection, using only necessary data, and giving users control over optional processing. 

14. Contact & Data-Protection Inquiries

For any questions about this Privacy Policy, data requests (access, correction, deletion, export), or privacy concerns, contact us at: [email protected]

If applicable for your jurisdiction, you may also have the right to contact your local supervisory authority for data protection complaints.