Privacy Policy

Last Updated: May 20, 2026

Contrack ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application (the "Service"), with a particular focus on how we handle email integration data (such as Google OAuth or custom IMAP integrations).

1. Information We Collect

To provide contract-tracking services, we collect and process the following categories of information:

• Account Details: Your name, email address, password (encrypted), and billing details.
• Mailbox Integration Data: If you choose to link your Gmail account via Google OAuth (or link custom mailboxes via IMAP), our Service requests permission to access your mailbox in a read-only or label-tagging capacity. We collect metadata, subject lines, message headers, snippets, body content, and attachment files from threads relevant to your contract tracking.
• Usage Statistics: IP addresses, browser types, and usage statistics to help us monitor and improve Service performance.

2. How We Use Your Information

We use the collected information for the following purposes:

• To detect, import, parse, and monitor contract-related email threads.
• To build contract summaries and highlight discrepancies/expirations.
• To facilitate communication, replies, and notifications.
• To maintain, secure, and optimize our Service.

3. Limited Use Policy (Google API Services)

Contrack's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We strictly adhere to the following:

• We only use access to read, write, modify, or control Gmail message bodies (including attachments), metadata, headers, and settings to provide or improve contract tracking features in our user interface.
• We do not transfer this data to third parties unless doing so is necessary to provide or improve these features, comply with applicable law, or as part of a merger or acquisition.
• We do not use this data for serving advertisements, and we do not allow humans to read this data unless you have given us explicit consent for troubleshooting or support purposes.

4. Data Storage and Retention

All sensitive credentials (such as OAuth refresh tokens or IMAP passwords) are stored using military-grade symmetric encryption (AES-256-GCM) in highly secure database environments. We retain mailbox data only as long as your workspace connection is active. If you disconnect your mailbox or delete your workspace, all synchronized mailbox data is permanently deleted from our servers.

5. Security of Your Data

We implement a variety of industry-standard security measures to maintain the safety of your personal information, including Secure Socket Layer (SSL/TLS) encryption for all database connections and web traffic. However, no electronic transmission over the internet or database storage is 100% secure.

6. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us at:

Email: khizerdogar@gmail.com