Privacy Policy
Effective: 2025-11-16
ReadyTrak (“we”, “us”) provides make-ready & maintenance software for property teams. This policy explains what we collect, how we use it, and the choices you have. It applies to the public website and the ReadyTrak app (including the PWA).
Information we collect
- Account data – name, email, company, password (stored as a one-way hash), timezone.
- Tenant content – properties, units, tasks, notes, uploaded photos, inventory records, assignments, and audit entries. This is “Tenant Data”.
- Usage & device – app events, basic telemetry, IP, user-agent; used for security, diagnostics, and capacity planning.
- Cookies/local storage – session cookies; optional remember-me; PWA install state; feature flags. If you enable notifications, we store a push subscription token.
- Billing – company details and payment metadata handled by our payment processor; we do not store full card numbers.
How we use data
- Provide, secure, and improve the service (RBAC, audit log, backups).
- Customer support and service notices.
- Billing, invoicing, and account administration.
- Legal compliance and preventing abuse.
Legal bases (where applicable): contract (to provide the service), legitimate interests (security/analytics), consent (notifications), and legal obligations.
Sharing
- Processors – hosting, email delivery, image storage/CDN, payments. They process data under contract and only as instructed.
- Legal/Protection – to comply with law, enforce terms, or protect rights.
- No selling – we do not sell personal information.
Your choices & rights
- Access/Update – edit your profile in the app; admins can manage team records.
- Export/Erase – tenants may export data and request deletion of Tenant Data. Some records may be kept in secure backups for a limited time.
- Notifications – browser/OS settings let you revoke PWA/web-push permission at any time.
If your account is provided by your employer, contact your organization’s ReadyTrak admin first for requests about Tenant Data.
Security & retention
- TLS in transit; password_hash for credentials; least-privilege RBAC; per-tenant data scoping; audit logs of admin actions.
- Backups performed off-box; retention is limited and rotated.
- We retain account info for the life of the account and delete or anonymize it after closure, subject to legal requirements and backup windows.
International use
The service is hosted in the United States. If you access it from other regions, you consent to processing in the U.S. We use standard contractual safeguards with processors where required.
Children
ReadyTrak is for business use and not directed to children under 16.
Changes & contact
We’ll post updates here and revise the effective date. For questions or requests, email support@readytrak.com.