Version: 2026-10-04
Effective date: 2026-10-04
At InstalTrack, we value your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. This Privacy Policy outlines how we handle your information when you visit our website. By using our website, you agree to the terms of this Privacy Policy.
InstalTrack is the service trade name. The legal service provider is Tomasz Szymoński, VAT ID 6792895776, ul. Białoruska 61/7, 30-638 Krakow, Poland, European Union.
Personal data entered into the service — including data of clients, employees, contractors, and team members, and project, document, photo, and address data — is controlled by the customer. The customer is the data controller for that data. Where an organization holds the account, that organization is the controller and the user acts on its behalf. InstalTrack processes that data only on the customer's documented instructions, including instructions given by using the service, and does not use it for InstalTrack's own purposes, including marketing, analytics of customer content, or product development.
InstalTrack remains the controller for account, billing, security, and abuse-prevention data that InstalTrack needs to provide and protect the service, and for data collected when you visit the website. The rest of this policy describes processing for which InstalTrack is the controller. Where the law requires it, or where it is necessary to remove unlawful or harmful content, InstalTrack may access or remove customer content and, for that limited action, acts as a controller.
We use Cloudflare, a third-party security service, to help protect our website and its users. As part of this service, Cloudflare may place a cookie, __cf_bm, in your browser to help us manage and enhance security. This cookie is used for bot management and to ensure that legitimate visitors are able to access the site. It does not collect personal information, and its purpose is solely for security reasons. For more information, please refer to Cloudflare's Privacy Policy.
If you submit the registration form or contact form, we process the data you provide, such as first name, last name, email address, phone number, and message content. We use this data to create and maintain your account, contact you, respond to requests, and send service-related emails.
For login, registration, and authentication flows, we use Google Firebase (including Firebase Authentication). For mobile app features, we may also use Firebase Cloud Messaging (FCM) for push notifications. This may involve processing selected technical identifiers and metadata required for these functions.
While we do use the __cf_bm cookie for security purposes, we do not utilize any other tracking technologies, including third-party analytics cookies, for collecting personal information.
If you prefer, you can disable cookies in your browser settings, though this may impact your experience on the website.
As a visitor to our website, you have the following rights under the GDPR:
To exercise your rights, contact us at [email protected]. We respond without undue delay, generally within 30 days.
If you use account-related features and enter customer, team-member, or other personal data, you declare that you have rights and authorization to use such data, obtained required notices and consents, and that the data is true, accurate, and up to date.
To protect legal compliance, user safety, and platform security, we may remove, block, or restrict access to data or content that is unlawful or prohibited, including abusive, sexual, violent, hateful, or infringing material.
We use selected third-party services necessary to operate the service, including Cloudflare (security) and Google Firebase (authentication, and for mobile apps also push notifications via FCM). These providers process data only to the extent required to deliver the service.
We use DigitalOcean for application infrastructure and database hosting (EU region environment). We may also use other comparable infrastructure providers where necessary for service operation, security, scalability, or continuity.
We may use Mailgun (Sinch Email) for transactional email delivery and service communications, which may process contact details and technical email delivery metadata.
We may use Sentry for error monitoring and service stability, which may process technical diagnostic data and error events.
For web map and geocoding features, we use OpenStreetMap (map tiles) and Nominatim (address geocoding) only when the customer uses the map feature. This sends the project address and standard request technical data. Those providers may process the address under their own terms.
More information: DigitalOcean Data Processing Agreement, Firebase Privacy and Security, Firebase Data Processing and Security Terms, Mailgun Terms, Sinch Data Processing Agreement, Sentry and Your Data, Sentry Data Processing Addendum, OpenStreetMap, Nominatim Usage Policy.
Our website may contain links to external websites. We are not responsible for the content or privacy practices of these websites. We encourage you to review their privacy policies before interacting with them.
The legal bases below apply to website, account, billing, security, and technical diagnostic data for which InstalTrack is the controller. We process that data based on: performance of a contract (account creation and maintenance), legitimate interests (security, handling inquiries, and service stability), legal obligations, and consent where required. The customer determines the legal basis for personal data the customer enters into the service. InstalTrack processes that data only on the customer's documented instructions.
We are not liable for delays or interruptions caused by events beyond our reasonable control, including war, armed conflict, terrorism, sanctions, government actions, natural disasters, epidemics, third-party infrastructure failures, internet outages, or power outages.
We reserve the right to update this Privacy Policy at any time. Any changes will be reflected on this page with an updated effective date.
This Privacy Policy and all matters related to the service are governed by the laws of Poland.
Any disputes arising from this Privacy Policy or use of the service shall be resolved exclusively by the competent courts in Poland.
If you have any questions about this Privacy Policy or your rights under GDPR, please contact us at:
Service provider: Tomasz Szymoński, VAT ID 6792895776, ul. Białoruska 61/7, 30-638 Krakow, Poland, European Union.