1. Scope
This Privacy Policy applies to the Tracelock web platform (tracelock.tech), the Tracelock mobile app (iOS and Android), and related services. By using our services, you agree to this policy.
2. Information We Collect
Tracelock collects information necessary to provide our fire safety management services:
- Account Information: Name, email address, role, and company affiliation
- Inspection Data: Fire safety inspection reports, compliance records, and audit trails
- Location Data: When you use our mobile app, we collect approximate location (GPS) to tag inspections and runs with location. Location is used only when the app is in use (foreground) and only for the stated purpose.
- Usage Data: Platform interactions, feature usage, and performance metrics
- Device Information: IP address, browser type, device characteristics, and device identifiers (for authentication and security)
3. How We Use Your Information
We use collected information to:
- Provide and maintain our fire safety management platform
- Process inspection reports and compliance documentation
- Ensure platform security and prevent unauthorized access
- Improve our services and develop new features
- Comply with legal and regulatory requirements
- Communicate important updates and service notifications
4. Data Security
Tracelock implements enterprise-grade security measures to protect your data:
- Encryption: All data encrypted in transit and at rest using AES-256
- Access Controls: Role-based permissions and multi-factor authentication
- Infrastructure: Google Cloud Platform with SOC 2 Type II compliance
- Monitoring: 24/7 security monitoring and intrusion detection
- Backups: Regular encrypted backups with point-in-time recovery
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share data only:
- With your explicit consent
- To comply with legal obligations or court orders
- With trusted service providers under strict confidentiality agreements
- In case of business transfers (with user notification)
- To protect our rights, property, or safety
6. Data Retention
We retain your data for as long as necessary to provide our services and comply with legal requirements:
- Account Data: Retained while your account is active
- Inspection Records: Retained per regulatory requirements (typically 7+ years)
- Audit Logs: Retained for security and compliance purposes
- Deleted Data: Securely purged within 30 days of deletion request
7. Your Rights
You have the right to:
- Access and review your personal data
- Correct inaccurate or incomplete information
- Request data portability
- Request data deletion (subject to legal requirements)
- Opt out of non-essential communications
- File complaints with supervisory authorities
8. Third-Party Services
We use the following third-party services that may collect or process data:
- Google Firebase: Authentication (email/password). Firebase processes your email and device identifiers to provide secure sign-in. See Firebase Privacy.
- Google Cloud Platform: Hosting and infrastructure for our API and data storage.
These providers are bound by confidentiality agreements and process data only to provide services to us.
9. Cookies and Tracking
We use essential cookies for platform functionality and optional analytics cookies to improve our services. You can manage cookie preferences through your browser settings.
10. International Data Transfers
Data may be processed in countries other than your residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions.
11. Children's Privacy
Our services are not intended for individuals under 16. We do not knowingly collect personal information from children under 16.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify users of material changes via email or platform notification at least 30 days before changes take effect.
13. Contact Information
For privacy-related questions, data access requests, or deletion requests, contact us at: