Privacy Policy

1. Information We Collect

We adhere to strict data minimization principles. We collect:

• Account Data: Name, email address, and authentication tokens provided when registering directly or via Google OAuth.
• Order Metadata: Order titles, client names, and client contact information inputted directly by the specialist to create tracking records.
• Tracking Analytics: Basic timestamps when milestone links are viewed or confirmed ("Looks good" / "Have a question").
• Payment Records: Paddle customer IDs and transaction statuses. We do not store raw credit card numbers or banking credentials.

2. How We Use Information

We process your data strictly to deliver the tracking dashboard, authenticate sessions, process subscriptions via Paddle, and display order timelines to your clients. We do not sell personal data to third-party brokers.

3. Infrastructure and Subprocessors

Your information is stored securely in PostgreSQL instances provided by Neon Inc. (hosted in isolated serverless regions with automated TLS encryption). Hosting and Edge functions are served by Vercel Inc. Payments are processed under GDPR-compliant contractual clauses by Paddle.com.

4. GDPR and Data Subject Rights

If you reside in the European Economic Area or United Kingdom, you have the right to request access to, rectification of, or complete erasure of your personal data. You can delete your account and all associated order trackers instantly inside the account dashboard or by contacting privacy@wen-track.com.

5. Security of Public Tracking Tokens

Each client tracking link uses a high-entropy, cryptographically unguessable token (e.g. WEN-9X82-KLA). No client authentication is required by design, preventing tracking link access from indexing on public search engines via noindex robots headers.

6. Contact

Data Controller: Wen Tracker Operations.
Inquiries: privacy@wen-track.com