Privacy Policy

Track Profit is a dashboard operated by Track Profit that brings together, for each customer, their stores' sales and their ad accounts' spend, and calculates profit. This page explains what data passes through here, what for, and how to ask for deletion.

In short: your data is used only to build your own dashboard. We don't sell, rent or share data with third parties, we don't use your data for anyone's advertising, and we don't train AI models with it.

1. Your account data

Name, email and password (stored hashed, never in plain text). Access logs — date, IP address and browser — are kept for a limited time, for security and legal reasons.

2. Data from connected stores

From your e-commerce platform (for example, Shopify) we receive orders: amount, currency, items, date and delivery country, plus refunds, disputes and payouts. The dashboard uses these numbers to calculate revenue and profit. The dashboard doesn't display or need your buyers' names, addresses or cards, and we never store card data.

3. Browsing data on our customers' stores

The tracking script installed on a customer's store records, on behalf of that merchant: a random session identifier, pages visited, device type, country and the click origin (for example, which ad brought the visit). It exists to match each sale to the right ad. We don't collect passwords, form contents or card data, and we don't build cross-site visitor profiles. For this data the merchant is the controller and we act as the processor under applicable data protection laws (such as GDPR and LGPD).

4. Data obtained through Google APIs

When you connect Google Ads, we do read-only requests for performance reports of your ad accounts: spend, clicks, impressions and conversions, per campaign and per day.

Track Profit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. That data is used exclusively to display your operation's results inside your own dashboard. It is not sold, not shared with third parties, does not feed third-party advertising and is not used to train AI models.

5. Data obtained from Meta (Facebook and Instagram)

When you sign in with Facebook, we receive the list of your ad accounts and their reports: spend, campaigns, ad sets and ads. Actions such as pausing a campaign or changing a budget only happen when you click the corresponding button. We never see your Facebook password — authorization happens on Meta's side and can be revoked at any time in your account settings.

6. Who the data sits with

With us and with the infrastructure providers that run the service (site hosting and database), contracted under confidentiality and used only to operate the product. These servers may be located outside your country; international transfers rely on the safeguards of the applicable law. Beyond that, we only hand over data when a law or court order requires it.

7. For how long

For as long as your account exists. Once deletion is requested, we erase the account, stores, history and access tokens, and confirm within 30 days — the step-by-step is on the data deletion page. Records the law requires us to keep are stored only for the legal period.

8. Your rights

Depending on where you live (GDPR, LGPD and similar laws), you have the right to confirmation, access, correction, portability, anonymization, information about sharing, consent withdrawal and deletion. To exercise any of them, write to contact@trackprofit.io. We reply within 15 days.

9. Cookies

The dashboard uses essential cookies only: keeping you signed in and remembering preferences such as the display currency. We don't use advertising cookies and we don't sell browsing data. The public site works without sign-up and without tracking cookies.

10. Children

The service is for businesses and people over 18. We don't knowingly collect data from minors; if it happens, we delete it as soon as we learn of it.

11. Security

Encrypted transport (HTTPS), hashed passwords, platform credentials kept in a vault and internal access restricted to who needs it. No system is infallible; if a relevant incident happens, we notify the affected and the competent authority within the legal deadlines.

12. Changes to this policy

The current version is always the one published on this page, dated at the top. Relevant changes are announced inside the dashboard.

13. Contact

Track Profit — contact@trackprofit.io