Privacy Policy

Depending on how you interact with the Services, we may collect the following categories of information.

Information You Provide

This may include:

• full name
• company name
• email address
• phone number
• job title
• billing information
• support requests
• account credentials
• communication preferences

You provide this information voluntarily when creating an account, contacting us, requesting information, or interacting with the Services.

Account Information

If you register for My Commtrac, we may collect:

• username
• encrypted password hash
• account preferences
• organization information
• authentication logs
• login history
• security settings

Information is never stored in plaintext.

Technical Information

When you visit our website or use the Services, we may automatically collect technical information including:

• IP address
• browser type
• operating system
• device type
• screen resolution
• language settings
• referring website
• pages visited
• session duration
• timestamps
• error logs

This information helps maintain security, improve performance, and diagnose technical issues.

Support Communications

If you contact Commtrac, we may retain:

• emails
• chat conversations
• attachments
• support tickets
• troubleshooting information

Unless separately required for authentication, security purposes, or governed by a separate enterprise agreement, the website and My Commtrac portal are not intended to collect:

• banking credentials
• online banking passwords
• payment card numbers
• government-issued identification
• financial account balances
• biometric information

Where enterprise products process such information under separate agreements, those activities are governed by customer-specific contractual documentation rather than this Privacy Policy.

We collect personal information to:

• provide the Services
• create and manage user accounts
• authenticate users
• respond to inquiries
• provide customer support
• improve the website
• improve product performance
• maintain platform security
• detect fraud and abuse
• comply with legal obligations
• communicate important updates

We do not sell personal information.

Where applicable under the General Data Protection Regulation (GDPR), we process personal information on one or more of the following legal bases:

• your consent;
• performance of a contract;
• compliance with legal obligations;
• protection of legitimate business interests, including security, fraud prevention, and service improvement.

Where consent is relied upon, you may withdraw that consent at any time.

Commtrac uses cookies and similar technologies to:

• maintain login sessions
• remember user preferences
• improve website functionality
• protect against fraudulent activity
• understand website performance

Cookies may include:

• Essential Cookies
• Functional Cookies
• Analytics Cookies

You may configure your browser to refuse cookies; however, portions of the Services may not function correctly.

We may use privacy-conscious analytics tools to understand:

• website traffic
• visitor interactions
• performance metrics
• page popularity
• technical issues

Analytics information is used in aggregate to improve the Services.

Where required by law, analytics cookies will only be enabled after obtaining appropriate consent.

Commtrac does not sell personal information.

We may share information only where necessary with:

• cloud infrastructure providers
• authentication providers
• email delivery providers
• payment processors
• professional advisors
• auditors
• legal authorities where required by law

Each provider is required to process information only as necessary for providing their services.

Your information may be processed in jurisdictions outside your province, state, or country.

Where personal information is transferred internationally, Commtrac implements reasonable safeguards designed to protect the information in accordance with applicable privacy laws.

We retain personal information only for as long as reasonably necessary to:

• provide the Services;
• comply with legal obligations;
• resolve disputes;
• enforce agreements;
• maintain security records.

Retention periods vary depending on the type of information and applicable legal requirements.

When information is no longer required, it is securely deleted or anonymized where reasonably practicable.

Commtrac implements administrative, technical, and organizational safeguards designed to protect personal information.

These safeguards may include:

• encryption in transit
• encryption at rest where appropriate
• access controls
• authentication
• logging
• monitoring
• least-privilege access
• secure development practices

No method of transmission or storage can be guaranteed to be completely secure.

Depending on your jurisdiction, you may have the right to:

• access your personal information;
• correct inaccurate information;
• request deletion;
• object to certain processing;
• restrict processing;
• request data portability;
• withdraw consent where applicable;
• lodge a complaint with an appropriate supervisory authority.

Requests may be submitted using the contact information below.

If you are located within the European Economic Area or the United Kingdom, you may have rights under the General Data Protection Regulation, including:

• Right of Access
• Right to Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Object
• Right to Data Portability
• Right to Withdraw Consent

Where required by law, Commtrac will respond to requests within applicable statutory timeframes.

For Canadian residents, Commtrac processes personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

You may request access to or correction of your personal information by contacting us.

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

• the right to know what personal information is collected;
• the right to request deletion;
• the right to request correction;
• the right to access collected information;
• the right to limit certain uses of sensitive personal information where applicable;
• the right not to be discriminated against for exercising your privacy rights.

Commtrac does not sell or share personal information for cross-context behavioral advertising as those terms are defined under California law.

The Services are intended for businesses and adults.

Commtrac does not knowingly collect personal information from individuals under the age of 18.

If we become aware that such information has been collected, we will take reasonable steps to delete it.

The Services may contain links to third-party websites.

Commtrac is not responsible for the privacy practices or content of third-party websites.

Users should review the privacy policies of those third parties independently.

We may update this Privacy Policy periodically.

Material changes will be reflected by updating the Effective Date at the top of this document.

Continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy where permitted by law.

Scope of this Policy: This Privacy Policy governs the collection and processing of personal information through Commtrac's public website and hosted My Commtrac portal. It does not govern customer data processed through enterprise software deployments, locally hosted infrastructure, APIs, or other services provided under separate commercial agreements. Those services are governed by their applicable contractual terms, data processing agreements, and customer-specific privacy obligations.