Privacy Policy

Overview

Trackr is a job application tracking tool that connects to your Gmail account to automatically parse and organize job-related emails. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

By using Trackr, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

Information We Collect

We collect only the data necessary to provide the service.

Category	What we collect	Why
Account information	Name, email address, profile image (provided by Clerk)	Identity, authentication, and personalization
Gmail content	Email metadata and body text for job-related emails only (sender, subject, date, body)	AI parsing to extract application details (company, role, status)
Gmail OAuth tokens	Encrypted OAuth 2.0 access and refresh tokens	Ongoing read access to Gmail on your behalf
Application data	Job applications, companies, roles, statuses, notes, and interview records you create or that are parsed from email	Core product functionality — your job search data
Usage data	Feature interactions, sync events, error logs	Service reliability and debugging

Gmail access scope: Trackr requests read-only access to Gmail. We access emails that appear to be job-related (applications, rejections, interview invitations, and offers). We do not read, store, or process personal correspondence, financial emails, or any other categories of email.

How We Use Your Information

Parse job application emails using AI to extract company, role, status, and key dates
Populate and maintain your application tracking board
Authenticate your account and maintain sessions
Send service-related communications (account alerts, data requests)
Diagnose and fix technical issues
Improve accuracy of email parsing models

We do not use your data for advertising, and we do not sell your data to any third party.

How We Store Your Data

Your application data, OAuth tokens, and account records are stored in a managed PostgreSQL database hosted on Neon (neon.tech). Neon provides encryption at rest (AES-256) and in transit (TLS 1.2+). Database access is restricted to server-side API processes only.

Gmail OAuth tokens are stored encrypted. Email content processed during a sync is used transiently to generate application records and is not stored beyond what is needed to populate your board.

Third-Party Services

Trackr uses the following third-party services to operate. Each service has its own privacy policy governing data they receive.

Clerk

Authentication & user management. Handles sign-in, session tokens, and user profile data.

clerk.com/privacy ↗

Google OAuth 2.0

Authorizes Gmail read access. Google processes the OAuth handshake and issues tokens.

policies.google.com/privacy ↗

Anthropic Claude

AI model used to parse email content and extract structured application data.

anthropic.com/privacy ↗

Neon

Managed PostgreSQL database hosting. Stores all application and account data.

neon.tech/privacy-policy ↗

When email content is sent to Anthropic's Claude API for parsing, it is subject to Anthropic's data usage policies for API customers. Anthropic does not use API inputs to train models by default. We recommend reviewing their privacy policy for the most current terms.

Cookies and Local Storage

Trackr uses the following browser storage mechanisms:

Session cookies — Set by Clerk to maintain your authenticated session. These are strictly necessary and expire when your session ends or you sign out.
Local storage — Used to persist minor UI preferences (view state, filter selections) client-side.

We do not use tracking cookies, advertising cookies, or cross-site analytics cookies.

Your Rights and Choices

You have the following rights with respect to your data:

Access: Request a copy of all data we hold about you, including your application records and account information.
Deletion: Request deletion of your account and all associated data. Upon request, we will delete your application records, OAuth tokens, and account data within 30 days.
Revoke Gmail access: You can revoke Trackr's Gmail access at any time via your Google Account settings at myaccount.google.com/permissions. Revoking access will stop future syncs but will not delete previously stored application data.
Correction: Correct inaccurate data in your account or application records directly within the app, or by contacting us.
Portability: Request an export of your application data in a machine-readable format (JSON or CSV).

To exercise any of these rights, contact us at privacy@trackr-app.com.

Data Retention

We retain your data for as long as your account is active. If you delete your account, your data is deleted from our primary database within 30 days and from backups within 90 days.

OAuth tokens are revoked and deleted immediately upon account deletion or upon your request.

Children's Privacy

Trackr is intended for users 16 years of age and older. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify users via in-app notice or email where required by applicable law.

Continued use of Trackr after changes take effect constitutes your acceptance of the updated policy.

Contact

For privacy-related inquiries, data requests, or to exercise your rights:

Email: privacy@trackr-app.com

Please include "Privacy Request" in the subject line and allow up to 5 business days for a response.