Privacy Policy

Effective date: 17 July 2026

SecuraTrack ("we", "us") provides a security-posture and compliance platform at app.securatrack.ai and this marketing site at securatrack.ai. This policy explains what personal data we collect, why, and the choices you have. Questions and requests: hello@securatrack.ai.

What we collect

Trial requests and contact. When you request a trial or book a demo we collect your name, work email, job title, company name, and company size.
Account data. When an account is created we store your name, email, role, and an optional profile picture, plus authentication data (including multi-factor enrollment) managed by our authentication provider.
Customer security telemetry. If your organization connects integrations (for example AWS, GitHub, or Okta), we collect read-only security configuration signals from those systems on your organization's behalf to power control monitoring. Connector credentials are stored encrypted. This data is processed under your organization's instructions.
Usage and security logs. We keep audit logs of platform activity (sign-ins, changes to controls and settings) as part of the product itself and for security.
Cookies. We use essential cookies only (session and security). No advertising trackers.

How we use it

To provide and secure the service, including authentication and audit trails.
To respond to trial requests and communicate about the product.
To operate billing for paid subscriptions.
We do not sell personal data and we do not use it for third-party advertising.

Who processes it for us

We use a small set of service providers to run SecuraTrack: Vercel (web hosting), Supabase (database and authentication), Amazon Web Services (infrastructure and key management), Stripe (payments), Resend (transactional email), Upstash (rate limiting), Cloudflare (DNS and bot protection), and Calendly (demo scheduling). Each processes data only as needed to provide their service to us. Processing primarily occurs in the United States and the European Union.

Retention

We keep account and organization data while the account is active. Audit logs are retained for compliance purposes. If you delete your account, personal profile data is removed; audit records are preserved where retention is required.

Your rights

You can request access to, correction of, or deletion of your personal data by writing to hello@securatrack.ai. If you are in the EU/EEA or UK you may also lodge a complaint with your supervisory authority.

Changes

We will post any changes to this policy on this page and update the effective date above.