Last updated: 1 January 2026
This Privacy Policy explains how TrackBooth handles personal data in connection with our website and platform. It applies to visitors to our site, to customers who use the platform, and to the team members and partners they invite.
For data about our own customers and website visitors, such as account details and demo requests, TrackBooth acts as the data controller. For end-user data that our customers capture through their tracking links and campaigns, such as click identifiers, session data and captured emails, TrackBooth acts as a data processor on the customer's behalf, and the customer is the controller. Processing in that role is governed by our Data Processing Addendum.
Depending on how you interact with us, we may collect:
We use personal data to provide and operate the platform; to deliver attribution, reporting and forensics functionality; to respond to demo and support requests; to bill for the service; to secure our systems and prevent fraud and abuse; to communicate important service information; and to improve our products. We do not sell personal data.
Where data-protection law such as the GDPR applies, we rely on: performance of a contract (to provide the service you've requested); legitimate interests (to operate, secure and improve the platform, balanced against your rights); consent (for certain cookies and marketing, where required); and compliance with legal obligations.
We share personal data only as needed: with sub-processors and infrastructure providers that help us run the service under appropriate contracts; with our customers, where you are an end user whose data is processed on their behalf; with professional advisers; and with authorities where required by law. A current list of sub-processors is available on request.
We retain personal data for as long as needed to provide the service and for legitimate business or legal purposes. Tracking and conversion data processed on a customer's behalf is retained according to the customer's configuration and our agreement with them; on termination, data is made available for export for a limited period before deletion.
Subject to applicable law, you may have the right to access, correct, delete or port your personal data, to object to or restrict certain processing, and to withdraw consent. Where TrackBooth is the processor, requests relating to end-user data should be directed to the relevant customer (controller); we will assist them as required. To exercise rights regarding data for which we are the controller, contact us using the details below.
We may process data in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards such as standard contractual clauses where required.
We apply technical and organizational measures to protect personal data, including encryption in transit, role- and field-level access controls, and audit logging. See our Security page for more. No system is perfectly secure, but we work to protect data and to respond promptly to incidents.
For privacy questions or to exercise your rights, contact [email protected].