FileTract

Privacy Policy

Last Updated: April 30, 2025

Filetract (“we,“ “us,“ or “our“) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website filetract.com (the “Site“) and use our services (the “Services“). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use the services.

1. Collection of Your Information

We may collect information about you in a variety of ways. The information we may collect via the Site and Services includes:

  • Personal Data: Personally identifiable information, such as your name, email address, and contact details, that you voluntarily give to us when you register for an account using our authentication provider (Clerk) or when you contact us.
  • Financial Data: Financial information, such as data contained within transaction records, invoices, bills, bank account details (specifically identifiers needed for connection, not full credentials which are handled by third parties like Plaid), or financial statements, that you upload to our Services or grant us access to via secure third-party connections (like Plaid) for the express purpose of data extraction, analysis, organization (e.g., into folders), and presentation within the Services. We treat this data as highly confidential and employ robust security measures to protect it.
  • Usage Data: Information our servers automatically collect when you access the Site and Services, such as your IP address, browser type, operating system, access times, pages viewed, and feature usage patterns (like utilizing AI auto-sorting). This helps us understand how our Services are used and improve them.
  • Data from Third-Party Services: If you choose to connect third-party services to your Filetract account (e.g., connecting a bank account via Plaid, authenticating via Clerk), we receive information from these services as authorized by you and governed by their respective privacy policies. For Plaid connections, this typically includes account identifiers, balances, and transaction history necessary to provide the Services. We do not store your bank login credentials.

2. Use of Your Information

Having accurate information permits us to provide, maintain, and improve the Services. Specifically, we may use information collected about you to:

  • Create and manage your account via our authentication provider.
  • Securely access, process, analyze, organize and display your financial data as directed by you within the Services.
  • Personalize your experience within the Services (e.g., learning folder preferences).
  • Monitor usage patterns to identify potential issues and improve service performance and features.
  • Communicate with you regarding your account, service updates, security alerts, and support messages.
  • Send periodic emails regarding new features or promotions, which you can opt-out of.
  • Prevent fraudulent activity and ensure the security of our Site and Services.
  • Comply with applicable legal requirements, such as tax laws or regulatory reporting.
  • Resolve disputes and enforce our agreements.

3. Disclosure of Your Information

We are committed to not selling your Personal or Financial Data. We may share information we have collected about you only in limited circumstances:

  • With Your Consent: We may share your information with third parties when we have your explicit consent to do so.
  • Third-Party Service Providers: We share information with third-party vendors and service providers who perform services on our behalf, such as cloud hosting (e.g., AWS/GCP/Azure), database management, authentication (Clerk), financial data aggregation (Plaid), payment processing (Stripe), customer support tools, and analytics providers (e.g., Umami). These providers only have access to the information necessary to perform their functions and are contractually obligated to maintain the confidentiality and security of your data.
  • For Legal Reasons: We may disclose your information if required by law, subpoena, or other legal process, or if we have a good faith belief that disclosure is necessary to protect the rights, property, or safety of Filetract, our users, or the public, or to prevent or stop illegal or unethical activity.
  • Business Transfers: In the event of a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding, your information may be transferred as part of that transaction, subject to standard confidentiality arrangements.

4. Security of Your Information

We implement robust administrative, technical, and physical security measures designed to protect your information from unauthorized access, use, alteration, or destruction. These measures include:

  • Encryption of data in transit (TLS/SSL) and at rest (AES-256).
  • Strict access controls and least-privilege principles for our personnel.
  • Regular security audits and vulnerability assessments.
  • Use of reputable third-party providers (like Clerk and Plaid) with strong security postures.
  • Adherence to industry best practices and standards (aiming for SOC 2 compliance as stated in our FAQs).

While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

5. Data Retention

We retain your Personal Data for as long as your account is active or as needed to provide you with the Services. We retain Financial Data processed through the Services based on your instructions and account settings, or as required to comply with legal obligations. Usage Data may be retained for longer periods in an aggregated or anonymized form for analytical purposes. You can request deletion of your account and associated data by contacting us, subject to legal or regulatory retention requirements.

6. Your Data Protection Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have certain rights regarding your personal information. These may include:

  • The right to access, update, or delete the information we have on you.
  • The right to rectification if your information is inaccurate or incomplete.
  • The right to object to our processing of your Personal Data.
  • The right to request that we restrict the processing of your personal information.
  • The right to data portability for the information you provide to us.
  • The right to withdraw consent at any time where we relied on your consent to process your personal information.

To exercise these rights, please contact us using the details below. We may need to verify your identity before responding to your request.

7. Policy for Children

Our Services are not directed to individuals under the age of 18. We do not knowingly collect Personal Data from children under 18. If you become aware that a child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from a child under 18 without verification of parental consent, we take steps to remove that information from our servers.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on the Site and updating the “Last Updated“ date. Your continued use of the Site or Services after such changes constitutes your acceptance of the new Privacy Policy.

9. Contact Us

If you have any questions, concerns, or comments about this Privacy Policy or our data practices, please contact us at:

Vivero s.r.o
Pod Mlynom 11, Marianka, Slovakia
info@filetract.com