Privacy Policy

1. Introduction

ValueTracker ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

By using ValueTracker, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our service:

• Account Information: Name, email address, password
• Professional Information: Job title, company name (optional)
• Accomplishment Data: Descriptions, titles, dates, categories, tags, and any other information you choose to document
• Voice Recordings: If you use our voice input feature, we process audio files to transcribe them into text

2.2 Automatically Collected Information

• Usage Data: Pages visited, time spent, features used
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs

2.3 Third-Party Authentication

If you sign in using Google OAuth, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Create and manage your account
• Process and store your accomplishment data
• Generate AI-powered analysis and summaries using Claude AI
• Send you service-related communications (account updates, security alerts)
• Respond to your requests and support inquiries
• Analyze usage patterns to improve user experience
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. AI Processing and Third-Party Services

4.1 Anthropic Claude AI

We use Anthropic's Claude AI to analyze your accomplishments and generate enhanced descriptions. When you opt to use AI features:

• Your accomplishment text is sent to Anthropic's API for processing
• Anthropic does not use your data to train their models
• Data is transmitted over encrypted connections (HTTPS/TLS)
• Anthropic's privacy policy applies to data they process: anthropic.com/legal/privacy

4.2 Other Third-Party Services

• Vercel/Hosting: Application hosting and infrastructure
• Database Provider: PostgreSQL database hosting (data encrypted at rest)
• Google OAuth: Optional authentication service

5. Data Security

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted using TLS/HTTPS
• Passwords are hashed using bcrypt with salt
• Database connections are encrypted
• Regular security updates and patches
• Access controls and authentication requirements
• Data is backed up regularly

While we strive to protect your information, no method of transmission over the internet is 100% secure. You are responsible for keeping your password confidential.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained until you delete your account
• Accomplishment data: Retained until you delete specific entries or your account
• Usage logs: Typically retained for 90 days
• Backups: May be retained for up to 30 days after deletion

7. Your Rights and Choices

You have the following rights regarding your data:

7.1 Access and Portability

You can access all your data through your account dashboard. You can export your accomplishments at any time.

7.2 Correction

You can edit your profile information and accomplishments directly in the application.

7.3 Deletion

You can delete individual accomplishments or your entire account at any time. Contact us at privacy@valuetracker.app for account deletion requests.

7.4 Opt-Out

You can opt out of AI processing by not enabling the "Enhance with AI" feature. You can unsubscribe from marketing emails using the link in any email.

8. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we use your data
• Right to Portability: Receive your data in a structured format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent at any time

Our legal basis for processing: (1) Contract performance, (2) Legitimate interests, (3) Your consent for AI processing.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for EU data
• Encryption in transit and at rest
• Service providers with appropriate privacy certifications

10. Children's Privacy

ValueTracker is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page with an updated "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice in the application

Continued use of ValueTracker after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: