Privacy Policy
Effective date: April 25, 2026 - TataDev LLC
This policy explains how TataDev LLC collects, uses, and protects your personal information when you use TataTrack.
1. Information We Collect
We collect information you provide directly: name, email, company name, and profile photo. We also collect usage data including task actions, project activity, and API token usage to improve the Service. We do not collect payment card details - all payments are processed securely by PayPal.
2. How We Use Your Information
We use your information to provide and operate TataTrack, send account notifications (invites and task assignments), respond to support requests, improve features, and comply with legal obligations. We do not sell or rent your personal data to any third party.
3. Data Storage and Security
Your data is stored in a secure Turso (SQLite) database hosted on AWS infrastructure in EU West. We implement industry-standard controls including hashed passwords (bcrypt), JWT session tokens, and HTTPS for all data in transit. Passwords are never stored in plaintext.
4. Cookies and Local Storage
TataTrack uses HTTP-only cookies for authentication sessions and localStorage for theme and language preferences. We do not use advertising or tracking cookies. You can clear these at any time through your browser settings.
5. Data Sharing
We do not sell, trade, or share your personal data with third parties except with your consent, to comply with legal obligations, or to protect TataDev LLC rights and property. PayPal processes payments, and their privacy policy governs payment data.
6. API Token Data
API tokens generated through TataTrack are stored as SHA-256 hashes. The raw token is never stored and is shown only once on creation. API requests made with your tokens are logged with timestamps for security and auditing.
7. Data Retention
We retain your data while your account is active. If you delete your account, data is permanently removed within 30 days. You can request early deletion at hello@tatatrack.cloud.
8. Your Rights
You can access your personal data, correct inaccurate data, request deletion, export your data, and withdraw consent. To exercise these rights, contact hello@tatatrack.cloud. EU users can also contact their local data protection authority.
9. Children's Privacy
TataTrack is not intended for children under 16. We do not knowingly collect personal information from children. If we become aware of such data, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy periodically. Significant changes are communicated by email or platform notice. The updated policy becomes effective when posted.
11. Contact Us
Data Controller: TataDev LLC Email: hello@tatatrack.cloud Website: https://tatatrack.cloud For privacy requests, email us with 'Privacy Request' in the subject line. We respond within 30 days.