Privacy Policy

Last updated: 24 September 2026

Introduction

Welcome to TrackIt ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit trackit.international (the "Site") and use our parcel tracking service (the "Service"). The Service includes TrackIt for Apple Wallet, TrackIt For Android (which uses Google Wallet), and TrackIt for Business.

By using the Site or Service, you consent to the practices described in this Privacy Policy.

Information We Collect

Information You Provide

  • Account Information: When you create an account, we collect your email address and authentication details (such as through Google or Apple sign-in) to provide and secure our services.
  • Tracking Data: We collect and store the tracking numbers you submit, together with any store or item details you add, to fetch package status from carriers, deliver live updates to your Apple Wallet or Google Wallet pass, and keep a permanent history of your parcels in your account. This data is kept for as long as your account exists and is not automatically removed once a parcel is delivered - it is only deleted if you delete that parcel or your account (see Data Deletion). Third-party tracking services we rely on to fetch carrier status - such as 17TRACK - may separately retain an anonymised copy of the tracking number, in accordance with their own retention practices. We do not control this retention, and no data that identifies you personally (such as your name or account) is shared with or kept by these services.
  • Support Enquiries: If you contact us via the support form or email, we collect your name, email address, and the content of your message.
  • Business Account Information: If you use TrackIt for Business, we collect your organisation's name, branding (such as logo and colours), API keys and webhook endpoints you create, and automation rules you set up.
  • Team Members and Invitations: An organisation can have several people working in it. When an owner or admin invites someone, we store the invited email address and the role they were offered (owner, admin, member or read-only). Once someone accepts, we link the membership to their TrackIt account and record their role. Members of an organisation can see the other members' names or email addresses and roles on the Team page, and owners and admins can see an audit log of actions taken in the organisation (such as inviting or removing people and changing settings).
  • Business Shipment Data: Businesses add shipments on behalf of their own customers, including the tracking number, carrier, and the customer's name and email address. For this data, the business is the data controller and we process it on its behalf. The business is responsible for having a lawful basis to share its customers' details with us. If you are a customer of a business that uses TrackIt and want your data corrected or removed, please contact that business first; you can also contact us.

Information Collected Automatically

  • Cookies: We use strictly necessary cookies to keep you signed in and remember your preferences, and, only with your consent, optional analytics cookies (see below). We do not use advertising or third-party cross-site tracking cookies. See our Cookie Policy for full details.
  • Analytics (Optional): If you accept analytics cookies in the cookie banner, we use Microsoft Clarity to understand how visitors use the Site - including pages visited, time spent, clicks, and session recordings of on-site behaviour. This is off by default, is not used for advertising, and does not track you across other websites. You can change your choice at any time via the "Manage Cookie Preferences" link in the site footer or on our Cookie Policy page.
  • Log Data: Our servers automatically record information such as your IP address, browser type, referring URL, pages visited, and access times. This data is used for security, fraud prevention, and service improvement.
  • Device Information: We may collect information about the device you use to access the Service, including device type, operating system, and unique device identifiers (for Apple Wallet integration). We also store a cookie that remembers whether you chose the Apple or Android version of the Site.

How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service, including communicating with shipping carriers to obtain package status and sending updates to your Apple Wallet via APNs or to your Google Wallet pass via the Google Wallet API.
  • For TrackIt For Business, send and manage team invitations, show shipments on the business dashboard and map, send status emails to the business's customers, send alerts to the business, and deliver webhook events to endpoints the business has configured.
  • Authenticate your account and maintain session security.
  • Process Premium and Business subscription payments.
  • Respond to your support enquiries.
  • Detect and prevent fraud, abuse, and security threats.
  • Comply with legal obligations.

Advertising

TrackIt does not display advertising and does not share your data with advertising networks. The Service is funded entirely by Premium and Business subscriptions.

Data Sharing and Disclosure

We do not sell your personal data. We only share your information with third parties in the following limited circumstances:

  • Shipping Carriers (via 17TRACK): To request and relay tracking status for your parcels.
  • Apple (APNs): To deliver live Wallet order updates to your device.
  • Google (Google Wallet API): If you use TrackIt For Android, we send your parcel's tracking details to Google to create and update your Google Wallet pass. Google handles this data under its own privacy policy.
  • Email Delivery (Resend): To send account, referral, and TrackIt For Business emails, including team invitations and status updates to a business's customers.
  • Apple Maps (MapKit JS): To display shipment locations on the TrackIt For Business map.
  • Other Members of Your Organisation: If you join a TrackIt For Business organisation, the other members can see your name or email address and your role, and, depending on their own role, the shipments and customer details in the organisation. If you are invited, the organisation's owners and admins can see the email address the invitation was sent to.
  • The Business You Ordered From: If a business tracks your order through TrackIt, that business can see the shipment's status and the details it provided to us.
  • Webhook Endpoints: A business can configure TrackIt to send shipment events to its own systems. What happens to that data afterwards is governed by that business's own privacy policy.
  • Hosting and Infrastructure: We use Vercel for hosting and Supabase for data storage. These providers process data on our behalf under strict confidentiality agreements.
  • Analytics (Optional, with consent): If you accept analytics cookies, usage and session data is processed by Microsoft Clarity to help us understand and improve the Site.
  • Payment Processing: Premium and Business subscription payments are handled by our third-party payment processor (PayPal). We do not store your payment card details.
  • Legal Requirements: We may disclose your information if required by law, regulation, or legal process.

Data Retention

  • Tracking data: Retained permanently against your account for as long as your account exists - a parcel being delivered does not remove it. It is only deleted if you remove that parcel yourself or delete your account (see Data Deletion). Third-party tracking services (such as 17TRACK) that we query on your behalf may separately retain an anonymised tracking number under their own retention policies.
  • Account data: Retained while your account is active. Permanently deleted upon account deletion (see Data Deletion).
  • Business data: Organisation data and shipments are kept while the organisation's account exists. An owner can delete the organisation at any time from its Settings page, which permanently deletes its shipments, customer details, members, invitations, API keys, webhooks, automation rules and audit log, and cancels its PayPal subscription. When someone leaves or is removed from an organisation, their membership is deleted immediately. Pending invitations are kept until they are accepted, declined or cancelled. If you delete your own TrackIt account, your memberships are removed, and you must first delete any organisation you are the only owner of or hand it to another owner.
  • Log data: Retained for up to 90 days for security and debugging purposes.

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (see Data Deletion).
  • Withdraw consent for data processing at any time - for analytics cookies, use the "Manage Cookie Preferences" link in the site footer.
  • Request a portable copy of your data.

To exercise any of these rights, contact us at support@trackit.international.

Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will delete it promptly.

Security

We implement industry-standard security measures to protect your information, including HTTPS encryption for all data in transit, strict access controls, and secure hosting infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your data may be processed and stored in countries outside your own. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws. We take steps to ensure your data remains protected in accordance with this Privacy Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes your acceptance of the updated policy.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at support@trackit.international.

Privacy Policy | TrackIt