Privacy Policy

Version: 2026-03-10

Effective date: 2026-03-24

1. Scope

This Privacy Policy applies to InstalTrack web services provided to business customers, including customer portal features for managing projects, customers, teams, and documents.

2. Roles and Responsibilities

In relation to personal data uploaded or entered by a customer into the platform, the customer acts as the data controller and InstalTrack acts as a data processor (or sub-processor where applicable), unless applicable law states otherwise.

The customer is responsible for determining legal grounds for processing, obtaining required notices and consents, and ensuring all uploaded data is lawful, accurate, and permitted under applicable laws.

3. Data We Process

We process account and operational data required to provide the service, including contact details, authentication data, project information, customer details, team data, and documents provided by the customer.

4. Purpose of Processing

Data is processed to operate, secure, maintain, and improve the platform, provide support, prevent abuse, and meet legal obligations.

5. Lawfulness of Customer Data

By using the service, the customer confirms that all data uploaded or otherwise provided to the platform is collected and processed lawfully, including obtaining any necessary permissions from data subjects.

The customer remains fully responsible for assessing whether their use of the service complies with privacy, employment, consumer, and industry-specific regulations.

6. Data Security

We use reasonable technical and organizational measures to protect data against unauthorized access, loss, misuse, or disclosure. No method of transmission or storage is completely secure.

7. Data Retention

Data is retained for as long as needed to provide the service, fulfill contractual obligations, resolve disputes, enforce agreements, and comply with legal requirements.

8. Subprocessors and Third Parties

We may use trusted infrastructure and service providers (for hosting, email, logging, and authentication) strictly to operate the platform. Such providers are bound by appropriate contractual and security obligations.

9. Data Subject Requests

If a data subject contacts us regarding customer-controlled data, we may refer the request to the relevant customer as data controller, except where we are legally required to act otherwise.

10. Contact

For privacy questions related to the service, contact: [email protected].