Privacy Policy.

We collect only what is strictly necessary to run the service effectively:

• Personal details: Name, email address, phone number.
• Payment details: UPI ID and account holder name (we do not process payments, this is purely for record-keeping and verification).
• Project details: Project names, milestone data, descriptions, amounts, and notes.
• Session data: IP address and user agent used for authentication and security purposes.

Your data is used solely to operate your account and projects:

• Providing and managing authentication and secure access.
• Facilitating milestone and project tracking.
• Sending transactional email notifications (such as OTPs) via Resend.
• Managing secure user sessions.

We do not sell, rent, or share your information with any third party for marketing purposes.

All data is securely stored in a PostgreSQL database hosted on Neon, located in the Southeast-1 region. By using TrackLancer, you consent to this data storage arrangement.

We use essential session cookies only, managed via better-auth, strictly for keeping you logged in securely. We do not use any tracking cookies or third-party marketing cookies to follow your browsing activity across other websites.

To provide our services, we use limited, trusted third-party providers:

• Resend: For delivering transactional emails (OTPs, notifications).
• Neon: For PostgreSQL database hosting.
• Vercel Analytics: For aggregate service performance tracking.

No advertising networks, social media trackers, or third-party marketing analytics are present on this platform.

In accordance with data minimization principles, we automatically manage and purge data:

• Temporary user activities and logs are permanently deleted after 7 days.
• Projects remaining in a pending or unclaimed status are considered abandoned and deleted after 30 days.
• Account data and active projects are retained as long as your account remains active, until a deletion request is made.

You have full control over your personal data:

• Request an export of your personal data at any time.
• Update your profile information and account details directly through the dashboard.
• Request full deletion of your account and all associated data, which is processed within 7 business days.

We employ industry-standard security measures to protect your data:

• All passwords are hashed using bcrypt and are never stored in plain text.
• One-Time Passwords (OTPs) are hashed and automatically expire after 10 minutes.
• Authentication is session-based.
• All communications occur over secure HTTPS connections.

TrackLancer is not intended for use by children. You must be at least 18 years of age to register an account and use our services. We do not knowingly collect personal data from anyone under 18.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after an update constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please reach out to us directly.