Privacy policy

Trakro (“we”, “us”) makes software that document shredding companies use to schedule, route, service, certify and bill their work. This policy explains what information we collect, why we collect it, who we share it with and the choices you have. Questions? Email team@usetrakro.com.

Who this covers

• Companies and their users: the shredding companies that subscribe to Trakro, and their owners, office staff and drivers.
• Their clients: the businesses and people a shredding company serves. A shredding company decides what client information to put into Trakro and how it is used. For that information we act on the shredding company’s behalf. If you are one of their clients, please contact the shredding company first; we will help them with your request.
• Visitors to our website.

What we collect

• Account details: name, email, phone, company name, timezone and password (stored only in scrambled, one-way form), and which version of our terms and this policy you accepted, and when.
• Business records a company enters: customers, sites, contacts, containers, schedules, prices, routes, invoices and payments.
• Service records from the driver app: arrival and departure times, services performed, notes, photos, signatures and, if the company turns it on, the phone’s location when a stop is started or marked not serviced.
• Certificates of destruction and pickup receipts, and a log of the emails sent with them.
• Support messages: what you write to us, plus your name, company, role and the screen you were on when you sent it from the app. We never attach your clients’ data.
• Usage and technical information: which screens and steps are used, device and browser type, and error reports when something breaks.

We never receive or store the documents being shredded. Trakro records that service happened, not what was on the paper.

How we use it

• To run the service: show your data to the people in your company who are allowed to see it, send certificates and invoices you ask us to send, and keep the driver app working offline.
• To keep it secure and reliable: prevent misuse, back up data and fix errors.
• To improve the product: see which steps new companies finish or get stuck on. The analytics we use for this never include your clients’ names, addresses or other client details.
• To contact you about your account, trial, billing and important changes, and to send short getting-started tips during a trial (owners can unsubscribe from tips).
• To answer your support messages.

We do not sell personal information, and we do not use it for advertising.

Who we share it with

We use a small number of service providers who process information only to provide their service to us:

• Supabase: database, sign-in and file storage
• Vercel: website and app hosting
• Resend: sending email
• Stripe: card payments and our subscription billing (we never see full card numbers)
• Sentry: error reports
• PostHog: product analytics
• A maps provider: turning addresses into map locations and routes
• Anthropic (Claude): answering questions typed into Ask Trakro, our in-app helper, and suggesting column matches when you import a spreadsheet. It receives only the question, the name of the screen you’re on and our help guides, or only your spreadsheet’s column names with a one-word description of each (like “phone” or “date”). It never receives your customer records, and Anthropic doesn’t use this information to train its AI.
• Intuit QuickBooks Online: only if a company chooses to connect it

We may also share information if the law requires it, to protect people’s safety or our rights, or as part of a sale or merger of our business (the new owner would be bound by this policy).

Cookies

We use cookies only to keep you signed in. Our product analytics keeps a random ID in your browser’s storage so it can count steps; it does not record page addresses, what you type or your screen. We do not use advertising cookies or trackers.

How long we keep it

We keep a company’s data while its account is active. If an account is paused or cancelled, we keep the data, read-only, for 12 months so the company can come back or download it, and we email the owner before deleting anything. Records a company deletes (such as a customer or site) can be restored for 30 days; after that they stay hidden but are not erased, so history and certificates stay complete. Certificates, service records and invoices are proof of destruction and billing, so they are never edited in place and are kept for at least seven years by default.

Security

Each company’s data is separated from every other company’s at the database level. Data is encrypted in transit, access is limited by role, changes to important records are written to a log that cannot be edited, and the database is backed up daily. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Our staff see a company’s data only when the company needs our help (for example, to look into a problem it reported). That access is turned on for a limited time, is visible to the company’s owner, and is recorded in the company’s audit history.

Your choices

• Owners can export their company’s data as CSV at any time, including after a trial ends.
• You can ask us to see, correct or delete your personal information by emailing team@usetrakro.com. Some records (such as certificates and invoices) must be kept for legal and audit reasons.
• You can unsubscribe from non-essential emails using the link in each one.

Children

Trakro is a business tool and is not meant for anyone under 16.

Changes to this policy

If we make important changes, we will update the date above and tell company owners by email or in the app before the changes take effect.

Contact

Trakro, Florida, USA. Email team@usetrakro.com.