Privacy Policy

Last Updated: September 27, 2026

Trackara Pro is operated by Commoner Apps LLC ("Commoner Apps," "we," "our," or "us"). We are committed to protecting the privacy and security of your business data. This Privacy Policy explains how we collect, use, store, and protect information when you use Trackara Pro, the business management service for mobile mechanics and auto repair professionals, through our iPhone, iPad and Android apps, the web portal at shop.trackara.app, our website at pro.trackara.app, and the customer-facing pages your business uses (the booking page and the customer portal at sign.trackara.app). Your customers' use of the customer portal is covered by its own privacy policy at sign.trackara.app/privacy.html, and the Trackara Education module by the Trackara Education privacy notice.

1. Information We Collect

Account Information

When you create a Trackara Pro account, we collect:

• Email address, first name, and last name
• Phone number (optional)
• Business information (business name)
• Location information (city, state/province, country)
• Lead source (how you heard about Trackara Pro)
• Payment information (processed securely by Stripe, Inc., all Trackara Pro subscriptions, whether you sign up on the web, iPhone/iPad, or Android, are billed through Stripe-hosted checkout; we do not use Apple In-App Purchase or Google Play Billing)
• Subscription and billing status, including records of successful and failed payment attempts, payment method used, and the timestamps of each event. We log this data to enforce our billing terms, including the grace-period and automatic-suspension workflow described in our Terms of Service (Section 4, "Failed Payments and Non-Payment Suspension"). We do not log or store your card number, CVV, or full bank account number, that data stays with our payment processors.

Terms Acceptance Information

When you agree to our Terms of Service and Privacy Policy during account creation, we collect and store:

• Timestamp of your acceptance
• Version numbers of the Terms and Privacy Policy you agreed to
• Device information (device model, operating system, and version)
• App version used during registration

This information is collected to maintain a legal record of your consent and is protected from modification after creation.

Business Data

The data you create and manage in Trackara Pro, including:

• Client information (names, contact details, addresses, vehicles)
• Invoice and quote data (line items, pricing, payments)
• Work order information (scope of work, signatures)
• Time tracking entries (labor hours, rates)
• Project and job details
• Photos and documentation
• Vehicle diagnostic data (OBD2 trouble codes, real-time sensor readings such as RPM, temperature, fuel consumption, and other engine metrics collected via Bluetooth OBD2 adapters)
• Vehicle inspection data (inspection templates, results, and reports)
• Maintenance tasks, reminders, and service history records
• Blueprints and procedure templates (custom and shared workflows)
• Marketplace listings, reviews, ratings, and engagement data
• Booking requests and appointment scheduling data
• Mileage tracking records (trip distances and routes)
• Route optimization data (multi-stop routes, ETAs, and workload schedules)
• Trackara Link updates, photos, documents and ETAs you share with customers, and the messages and vehicle-health readings customers share back with you
• Customer rewards balances and history
• Team members, technician seats, operators and their permissions
• Credentials for third-party accounts you connect (such as payment processors, parts suppliers, shipping carriers and your own email account), stored encrypted
• Business settings and preferences

Device Permissions and Sensor Data

Trackara Pro may request access to the following device capabilities. Each permission is requested only when needed and can be managed in your device settings:

• Bluetooth: Used to connect to OBD2 diagnostic adapters for vehicle scanning. Bluetooth data is processed locally on your device and only stored if you save a diagnostic report.
• Location (GPS): Used for route optimization, mileage tracking, geocoding client addresses, and calculating ETAs for service appointments. Location data is collected only while using these features and is not tracked in the background unless you have actively started a mileage trip.
• Camera and Photo Library: Used to capture and attach photos to projects, vehicle inspections, and documentation. Photos you attach are stored in our cloud (Firebase Storage) so they appear on your other devices, in the web portal and on documents you share with customers.
• Calendar: Used to sync appointments and scheduled jobs with your device calendar. We read and write calendar events only for Trackara Pro appointments.
• Contacts: Used to quickly import client contact information. Contact data is read on-demand and is not bulk-uploaded or stored beyond what you save as a client record.
• Notifications: Used to deliver appointment reminders, booking requests, and other time-sensitive alerts via Apple Push Notification Service and Firebase Cloud Messaging.
• Microphone and Speech Recognition: Used for voice notes and inspection dictation. Audio is recorded only when you start a voice note. On iPhone and iPad, dictation uses Apple's speech recognition, which may process audio on Apple's servers; we keep only the text and recordings you choose to save.
• Phone (Android): Used to initiate phone calls to clients directly from the app. The app does not record calls, access call logs, or store any call-related data.

Booking Portal Data

If you enable the customer booking portal, your customers may submit booking requests that include their name, phone number, email address, service address, vehicle information, the services they want, notes, photos, answers to your intake questions, preferred appointment times, and any deposit they pay. We also keep a one-way hash of the phone number so returning customers can be recognized, and the booking page may use Google reCAPTCHA to block spam. This data is associated with your account and is subject to the same security and retention policies as your other business data.

Trackara Find Marketplace Profile (Optional)

If you publish a profile on Trackara Find (find.trackara.app), we collect your business name, photo or logo (by default the profile image already on your Trackara Pro account), service area and radius, services and vehicle types, business phone, credentials you list, and, if you choose to add them, your insurance carrier, policy number, expiry date and certificate. We also record when you accepted the Mechanic Marketplace Terms, the leads offered to you and how you responded, and reviews customers leave about completed jobs.

• Shown publicly: business name, photo or logo, service area, services, vehicle types, credentials, the Insured badge when current, ratings and reviews.
• Kept private: your business phone (shared only with a customer whose request you accept), your insurance carrier, policy number and certificate, and your terms acceptance record. The rest is seen only by you and Trackara staff reviewing your profile.
• Customer data from leads: when you accept a request, the customer's name, phone, email and service address are added to your bookings. From then on you handle that information as an independent business, subject to the Mechanic Marketplace Terms. Customers are covered by the Trackara Find privacy notice.

Usage Analytics and Crash Reports

To keep the Service working and improve it, we collect usage and diagnostic data linked to your account:

• Feature usage and in-app events
• App performance metrics
• Error reports and crash data
• Device type, operating system and app version

Analytics in the apps is turned on when you accept these terms, and you can turn it off in the app's settings. Crash reports and error logs are always collected because we need them to fix problems. On iPhone and iPad, the app asks for your permission before any tracking for advertising.

Website, Advertising and Email

Our website uses Google Analytics, Google Ads and Reddit Ads to measure visits and sign-ups, and asks for your consent through a cookie banner. When you sign up after clicking a Reddit ad, we send Reddit a one-way hash of your email address and phone number, never the raw values, so Reddit can attribute the sign-up. The shop web portal uses Google Analytics. We send you account, billing and product emails; some include open and click tracking, and you can unsubscribe from marketing emails at any time.

Support Requests

When you email us or open a support ticket, we keep your message, name and email address. We use Google Gemini to sort and summarize incoming support messages so we can respond faster.

2. How We Use Your Information

We use your information to:

• Provide the Service: Enable core features including client management, invoicing, work orders, time tracking, vehicle diagnostics, route optimization, scheduling, maintenance management, vehicle inspections, mileage tracking, and marketplace functionality
• Cloud Sync: Synchronize your data across your devices and the web portal through Google Firebase
• Vehicle Diagnostics: Process OBD2 data from Bluetooth adapters to display diagnostic trouble codes, real-time vehicle metrics, and generate diagnostic reports
• Route Optimization: Use your location and client addresses to calculate optimized multi-stop routes, ETAs, and driving directions
• Mileage Tracking: Record trip distances using GPS for business expense and tax deduction purposes
• Booking Portal: Process customer booking requests and deliver appointment notifications
• VIN Decoding: Send Vehicle Identification Numbers to NHTSA to retrieve vehicle specifications
• Account Management: Manage your subscription and authentication
• Customer Support: Respond to your inquiries and provide technical assistance
• Improve the App: Analyze usage patterns and crash reports to enhance features and fix bugs
• Customer Features: Deliver documents, payment links, Trackara Link updates, rewards and booking notifications to your customers when you use those features
• Security: Detect and prevent fraud, abuse, and security incidents

3. Data Storage and Security

Where Your Data Lives

Trackara Pro works across iPhone, iPad, Android, and any web browser, and keeps your data in sync so the same records appear everywhere you sign in. To make that possible, your business data is stored in our secure cloud (Google Firebase / Cloud Firestore) and cached on each device so the app stays fast and keeps working offline. Changes you make offline sync automatically when you reconnect.

User-Imported PDFs (Device-Only)

If you use the Service Manuals feature to import PDF files (such as service manuals, wiring diagrams, or TSBs) onto your device, those files are stored only on your local device. We do not upload them to our servers, do not include them in cloud sync, do not index or scan their contents, and do not transmit them to any third party. If you delete the app, factory-reset, or switch phones, imported PDFs are gone. Bookmarks you create for imported PDFs are also stored only on the device.

Cloud Infrastructure

Your data is stored and processed using:

• Google Firebase (Cloud Firestore, Authentication and Storage): our cloud database, sign-in and file storage provider (encrypted in transit and at rest; GDPR and SOC 2 compliant)
• Hostinger: hosts our websites and customer-facing pages and delivers email we send

Encryption & Security

All data transmission uses industry-standard TLS encryption, and stored data is encrypted using AES-256 encryption. We take reasonable measures to protect your information; however, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. You use the Service at your own risk, are responsible for keeping your account credentials confidential, and should maintain your own backups of important data.

Data Access

We do not access, view, or share your client data, invoices, or business information except as needed to operate, secure, support, or troubleshoot the Service, or as required by law. Your data is yours.

Your Customers' Data (Your Responsibility)

Trackara Pro is a tool you use to run your business. When you enter information about your own customers (such as their names, contact details, vehicles, and service history), you decide why and how that information is collected and used. For privacy-law purposes, this means you are the controller of your customers' information and Trackara Pro acts as your service provider / data processor, handling that information on your behalf and on your instructions. You are responsible for having a lawful basis to collect it, for providing any privacy notices or obtaining any consent your customers require, and for honoring their privacy and communication preferences. This Privacy Policy describes how we handle information; it is not a substitute for your own privacy practices toward your customers.

4. Data Sharing and Disclosure

We do NOT sell, rent, or trade your personal or business data to third parties.

We may share limited data in these situations:

• Service Providers: Apple (App Store distribution, MapKit, speech recognition), Google (Firebase, Maps, Analytics, Ads, Crashlytics, ML Kit, Gemini AI, reCAPTCHA, Play Store distribution), Stripe (subscription payments on all platforms and Trackara add-on charges), Square and Afterpay, and First Nationwide Payments (customer payments, if you connect them), Reddit (ad measurement), Hostinger (hosting and email), Thumbtack (lead integration, if connected), parts, shipping and store integrations you connect, NMVTIS data providers (vehicle history reports), NHTSA (VIN decoding), and map and address services. See Section 13 for full details on each provider.
• Your Customers: When you send a document, payment link, Trackara Link update, rewards balance or booking confirmation, the customer receives the information you include.
• Your Team, Operators and Partners: Team members you add see what you give them access to. If you join a brand network or sign up through a partner association, the brand headquarters or association can see your membership status and the summary figures described in the app.
• Trackara Find: If you publish a marketplace profile, the public parts of it (see Section 1) are shown to customers on find.trackara.app, and customers who hire you through it can review you there.
• Legal Requirements: If required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or sale of assets (you will be notified)

5. Your Rights and Choices

Access and Export

You can access all your data within the app. Export features allow you to download invoices as PDFs. For complete data export, contact support.

Data Deletion

You can delete individual records (clients, invoices, etc.) within the app. To delete your entire account and all associated data, use the "Delete Account" option in the app's settings, or contact support@trackara.app. Deletion starts a 30-day window during which you can sign in and restore the account. After that window, we permanently remove your cloud data and files and disassociate the account from the Service. Copies of documents you already sent to customers, reviews on Trackara Find, and records we must keep for billing, tax or legal reasons may remain, and we keep a record that the deletion was requested.

Note: Account deletion is a data action and does not cancel any active subscription. Trackara Pro subscriptions are billed through Stripe (not Apple's App Store or Google Play), so there is no in-device subscription screen to cancel from, email support@trackara.app to cancel. If you want to stop future charges, cancel your subscription before deleting your account. See our Cancellation Policy for details.

Analytics Opt-Out

You can turn off analytics in the app's settings at any time. Crash reports are still collected so we can fix problems.

Cloud Sync Control

Your data syncs to your account so it's available on every device and in the web portal. You stay in control through the in-app export and account-deletion tools described in Section 5.

6. Data Retention

• Active Accounts: We retain your data as long as your account is active and you maintain a subscription
• Canceled Subscriptions: Your account is suspended and your data is kept so you can come back. If you want it deleted, delete your account
• Account Deletion: Data is permanently deleted after the 30-day restore window described in Section 5
• Legal Requirements: Some data may be retained longer if required by law (e.g., financial records for tax purposes)

7. Children's Privacy

Trackara Pro is a business application intended for professional use by adults. We do not knowingly collect information from individuals under 18 years of age outside the Education module. Students who use the Education module through their school are covered by the Trackara Education privacy notice.

8. International Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. See Section 14 for the safeguards we use.

9. California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information we collect and how it's used
• Request deletion of personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Not be discriminated against for exercising these rights

To exercise these rights, email support@trackara.app.

Do Not Sell My Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. However, if you wish to formally submit a "Do Not Sell My Personal Information" request under CCPA, you may contact us at support@trackara.app with the subject line "CCPA Do Not Sell Request." We will respond within 45 days and provide confirmation that we do not sell your data.

10. European Privacy Rights (GDPR)

Data Controller Information

Geographic Scope: Trackara Pro (operated by Commoner Apps LLC) is designed and marketed for users in the United States and Canada. We do not actively target or solicit users in the European Economic Area (EEA), United Kingdom, or Switzerland. If you are located in one of these regions and choose to use our Service, the following rights may apply to you under the General Data Protection Regulation (GDPR).

For purposes of GDPR, the data controller is:

Legal Entity: Commoner Apps LLC
Email: support@trackara.app
Phone: (801) 946-9396
Mail: 5121 Collin McKinney Pkwy, Ste 500 PMB 1220, McKinney, TX 75070, United States

We act as the data controller for the account and subscription information described in Section 1 (Account Information, Terms Acceptance Information). For the business data you enter about your own customers within the Service, see "Your Customers' Data (Your Responsibility)" in Section 3, you are the data controller of that information and we act as your data processor, handling it only on your instructions as described in Section 3.

Your GDPR Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under GDPR:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for certain purposes
• Right to Restrict Processing: Request limitation of data processing
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Right to Lodge a Complaint: File a complaint with your local supervisory authority

To exercise any of these rights, contact us at support@trackara.app. We will respond within one month of receipt of your request.

Supervisory Authority

EU, UK, and Swiss residents have the right to lodge a complaint with their local data protection supervisory authority if they believe their data protection rights have been violated. A list of EU data protection authorities can be found at: edpb.europa.eu

11. Canadian Privacy Rights (PIPEDA)

Data Controller Information

For purposes of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the data controller is:

Legal Entity: Commoner Apps LLC
Email: support@trackara.app
Phone: (801) 946-9396
Mail: 5121 Collin McKinney Pkwy, Ste 500 PMB 1220, McKinney, TX 75070, United States

PIPEDA Compliance

Trackara Pro complies with PIPEDA's 10 Fair Information Principles for all Canadian users:

1. Accountability: We are responsible for personal information under our control and have designated individuals accountable for our compliance
2. Identifying Purposes: We identify the purposes for which personal information is collected at or before the time of collection
3. Consent: We obtain your knowledge and consent for the collection, use, or disclosure of personal information, except where inappropriate
4. Limiting Collection: We collect only the personal information necessary for the purposes identified
5. Limiting Use, Disclosure, and Retention: We use or disclose personal information only for the purposes for which it was collected, and retain it only as long as necessary
6. Accuracy: We keep personal information as accurate, complete, and up-to-date as necessary
7. Safeguards: We protect personal information with security safeguards appropriate to its sensitivity
8. Openness: We make information about our policies and practices for managing personal information readily available
9. Individual Access: Upon request, you will be informed of the existence, use, and disclosure of your personal information
10. Challenging Compliance: You may challenge our compliance with these principles

Your PIPEDA Rights

If you are a Canadian resident, you have the following rights under PIPEDA:

• Right to Access: Request access to your personal information held by us
• Right to Correction: Request correction of inaccurate or incomplete personal information
• Right to Withdraw Consent: Withdraw your consent for processing at any time (subject to legal or contractual restrictions)
• Right to File a Complaint: Lodge a complaint with the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, contact us at support@trackara.app. We will respond within 30 days of receipt of your request.

Data Storage for Canadian Users

Data for Canadian users is stored using the same secure infrastructure as all our users (Google Firebase). Data may be stored in the United States but is protected by appropriate safeguards including encryption and Standard Contractual Clauses to ensure PIPEDA compliance.

Privacy Commissioner of Canada

If you have concerns about how we handle your personal information, you may file a complaint with:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca

12. Data Breach Notification

In the event of a data breach that compromises the security of your personal information, we will:

• Notify affected users via email without unreasonable delay after confirming a breach affecting their personal information, consistent with applicable breach-notification laws
• Notify relevant data protection authorities and supervisory bodies within the specific deadlines required by applicable law (for example, within 72 hours of becoming aware of a qualifying breach under GDPR, where GDPR applies)
• Provide clear information about what data was affected, when the breach occurred, and potential consequences
• Describe the measures we are taking to address the breach and prevent future incidents
• Offer guidance on protective steps you can take to safeguard your information

Breach notifications will be sent to the email address associated with your Trackara Pro account. Please ensure your email address is current and accurate.

13. Third-Party Service Providers (Complete List)

Trackara Pro uses the following third-party service providers to deliver our services:

Apple, Inc.

• Services: App Store distribution, push notifications, MapKit (maps, geocoding and directions on iPhone and iPad), and speech recognition for dictation. Subscription payments are processed by Stripe (not Apple In-App Purchase).
• Data Shared: Device information, push notification tokens, addresses and locations you look up on the map, and audio you dictate
• Privacy Policy: apple.com/legal/privacy
• Location: United States

Google LLC (Firebase, Maps, Ads & AI Services)

• Services: Firebase Authentication (user accounts), Cloud Firestore (database), Firebase Storage (file storage), Firebase Analytics (usage analytics), Firebase Cloud Messaging (push notifications), Firebase Crashlytics (crash reporting), Google Analytics (website and web portal), Google Maps SDK (maps on Android), Google ML Kit (on-device VIN and barcode scanning on Android; images stay on the device), Google Ads (conversion tracking and campaign measurement), reCAPTCHA (spam protection on the booking page), Google Gemini AI (AI-assisted suggestions, Education-module grading, and support message triage)
• Data Shared: User authentication data, app usage and crash diagnostics linked to your account (device model, OS version, crash stack traces), location data when Maps features are active, ad conversion events, and the text you submit to AI features
• Privacy Policy: policies.google.com/privacy
• Data Location: United States (Google Cloud)
• Compliance: GDPR compliant, SOC 2 Type II certified, ISO 27001 certified
• Data Retention: Firestore data retained until you delete it or close your account. Firebase Analytics data retained for 14 months. Crashlytics data retained for 90 days.
• AI Features: In-app AI features (such as diagnostics guidance, task steps, line-item and content suggestions, and Education-module grading) are optional, and you can use every core feature without them. When you use one, the text and inputs you submit to it are sent to Gemini; we do not send your payment information. Support messages you send us, including your name and email address, are sorted and summarized with Gemini.

Stripe, Inc.

• Service: Payment processing for Trackara Pro subscriptions on all platforms, and for add-ons charged to your card on file (such as technician seats, Trackara Link codes and vehicle history reports). If Stripe card payments become available to you and you connect your own Stripe account, Stripe also processes your customers' invoice payments and booking deposits, and we receive the payment status.
• Data Shared: Payment card information, billing name and address, email address. Stripe handles all payment card data, Trackara Pro does not store card numbers.
• Privacy Policy: stripe.com/privacy
• PCI Compliance: Stripe is PCI DSS Level 1 certified
• Location: United States

Square (Block, Inc.) and Afterpay US, Inc.

• Service: Card and Afterpay payments on your invoices, only if you connect your Square account. Your customers pay on Square's hosted checkout page.
• Data Shared: To create a payment link we send Square the invoice number and the amount due. Square sends back the payment status, amount, payment type (for example card or Afterpay), card brand and last four digits where there is a card, and a receipt link, which we record on the invoice. We keep the access tokens Square issues when you connect, so we can create payment links on your behalf. Square and Afterpay collect card details and Afterpay applications directly; Trackara Pro never receives card numbers or Afterpay application data.
• Privacy Policy: squareup.com/us/en/legal/general/privacy and afterpay.com/en-US/privacy-policy
• Location: United States

First Nationwide Payments (iPOSpays)

• Service: Card payments on your invoices and booking deposits, only if you connect a First Nationwide merchant account
• Data Shared: We store your terminal number and access token, and send the invoice number, amount and your customer's name to create a hosted payment page. We receive the payment status. First Nationwide collects card details directly.
• Location: United States

Thumbtack, Inc.

• Service: Lead generation integration, if you use Thumbtack through the app, customer lead data from Thumbtack is imported into Trackara Pro for job management
• Data Shared: Customer name, contact information, and job details as provided by Thumbtack lead profiles. When you reply to a lead or update its status in Trackara Pro, your message and the job status are sent back to Thumbtack.
• Privacy Policy: thumbtack.com/privacy
• Location: United States
• Optional: Thumbtack integration is only active if you connect a Thumbtack account within the app.

eBay Inc.

• Service: Parts catalog search, the app can search eBay Motors for automotive parts pricing and availability
• Data Shared: Search query terms (part names, part numbers, vehicle year/make/model) when you use the parts search feature. No personal identifying information is shared.
• Privacy Policy: ebayinc.com/privacy-center
• Optional: Parts search is only triggered when you actively perform a search within the app.

Reddit, Inc.

• Service: Advertising measurement for sign-ups that come from Reddit ads
• Data Shared: The Reddit ad click ID, your browser's user agent, and a one-way hash of your email address and phone number
• Privacy Policy: reddit.com/policies/privacy-policy

Hostinger International Ltd.

• Service: Hosting for our websites, customer-facing pages and website API, and delivery of email we send
• Data Shared: Website requests (including IP address), email addresses and the content of emails we send
• Privacy Policy: hostinger.com/legal/privacy-policy

Vehicle History Data Providers (NMVTIS)

• Service: Vehicle history reports, when you or your customer order one
• Data Shared: The vehicle's VIN only
• Providers: Approved NMVTIS data providers, such as VinAudit

Parts, Shipping and Online Store Integrations

• Service: PartsTech and Nexpart (parts quotes and orders), Shippo, ShipStation and XPO (shipping), and Shopify and WooCommerce (importing your online store orders), only if you connect them
• Data Shared: The parts, vehicle, order and ship-to details needed to quote, order, import or ship, and the credentials you provide to connect your account

Maps, Addresses and Tax Rates

• Service: OpenStreetMap map tiles and address lookups, U.S. Census Bureau and Statistics Canada geographic lookups for service areas and booking routing, and the Florida Department of Revenue for Florida sales tax rates
• Data Shared: The addresses and map areas being looked up

NHTSA (National Highway Traffic Safety Administration)

• Service: Vehicle Product Information Catalog (vPIC) API for VIN decoding
• Data Shared: Vehicle Identification Numbers (VINs) only when you use the VIN lookup feature
• Purpose: Decode VIN to retrieve vehicle make, model, year, trim, and specifications
• Privacy Policy: nhtsa.gov/privacy-policy
• Data Retention: NHTSA does not retain VIN lookup requests per their privacy policy
• Location: United States (U.S. Government API)

Data Processing Agreements

Where a provider processes personal data on our behalf, we rely on its data processing terms to require it to protect that data in line with GDPR, CCPA, and other applicable data protection laws. Public data services that receive only lookups (such as NHTSA, OpenStreetMap and government geographic services) do not receive data linked to your account.

14. International Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate data centers. When we transfer personal data from the European Economic Area (EEA), United Kingdom, Switzerland, or Canada to countries that do not have an adequacy decision, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs): We use EU-approved Standard Contractual Clauses with our data processors
• EU-U.S. Data Privacy Framework: Where the receiving provider participates
• Service Provider Certifications: Our providers maintain GDPR and PIPEDA compliance certifications and implement appropriate technical and organizational safeguards

You have the right to obtain information about the safeguards we use for international data transfers by contacting support@trackara.app.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of Trackara Pro after changes constitutes acceptance of the updated policy.

16. Contact Us

For privacy questions, concerns, or requests, contact Commoner Apps LLC:

• Email: support@trackara.app
• Phone: (801) 946-9396
• Mail: 5121 Collin McKinney Pkwy, Ste 500 PMB 1220, McKinney, TX 75070, United States
• Website: pro.trackara.app