Legal

Privacy Policy

Last updated 25 October 2026

This policy explains what Trackfluence collects, why we collect it, and the choices you have. It applies to trackfluence.app and our tracking redirects. Capitalised terms not defined here have the meaning in the Terms of Service.

1. Who we are

Trackfluence is a software service for influencers and agencies to measure clicks and sales on products they promote. For privacy questions, reach us through the Settings page of your account.

2. Account data

When you register or sign in we process:

  • name, email address, and a hashed password (if you use email login);
  • Google account identifiers, email, and profile photo if you use Google sign-in;
  • plan selection and billing interval you chose at signup;
  • store profile fields (name, bio, social links, logos) and product details you enter;
  • optional uploaded images (avatars, logos, product images).

We use this data to operate your account, enforce plan limits, show your public storefront when you publish it, and communicate about the Service.

3. Tracking data from your links

When a visitor opens a Trackfluence tracking link we record: time of the click, HTTP referrer, device and browser family, a coarse country derived from the request, and a one-way hash of the visitor IP (with a server-side salt). We do not store the raw IP. We use this to count clicks and unique visitors, power analytics charts, and fill PDF reports you download. We do not sell visitor-level data or use it to advertise to those visitors.

4. Cookies and similar storage

We use cookies and similar storage for sign-in (session / JWT), CSRF and OAuth checks, theme preference, and which store is active in the dashboard. Tracking links themselves are redirects; they do not set a marketing pixel on destination sites. You can block cookies in your browser; the dashboard will not stay signed in without session cookies.

5. Processors

We use infrastructure providers to host the app and database (including MongoDB Atlas or equivalent), Google for optional OAuth, and Cloudinary if you enable image uploads. They process data only to provide those functions. Destination websites and affiliate networks you link to collect their own data under their policies — we do not control that.

6. Retention

Account and product data last until you delete them or we close the account. Click and conversion records are kept so your historical reports remain accurate; we may aggregate or delete older logs if needed for operations. Hashed IPs cannot be reversed to recover the original address.

7. Sharing

We do not sell personal data. We share it only: with processors above; if you publish a storefront (the public profile and products you chose to show); in PDF reports you generate and send to brands; or when required by law or to protect the Service against abuse.

8. Your choices

You can update profile and store information in the dashboard, stop publishing a storefront, and deactivate products so their links no longer track. You can delete your account and its data at any time from Settings → Delete account. For a copy of your data or other requests, reach us through the Settings page of your account from the email on the account. Some records may be retained where we must keep them for security, dispute, or legal reasons.

9. Children

The Service is not directed at children under 13, and we do not knowingly collect account data from them. If you believe we have, reach us through the Settings page of your account so we can delete it.

10. Changes

We may update this policy. The “Last updated” date at the top will change. Material updates will be posted on this page. Continued use of the Service after an update means you accept the revised policy.