Privacy Policy

Trakkt is the cable management platform built for the crews and offices who install, terminate, and hand over electrical work. This policy explains what personal information we collect from the people who use Trakkt, why we collect it, where it lives, and the rights you have over it. It complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and BC's Personal Information Protection Act (PIPA). Trakkt is operated in British Columbia, Canada.

We collect only what the service needs to run:

• Account information. Your name, email address, and a hashed password. We never store passwords in readable form.
• Project data. The cable schedules, termination records, conduit data, status checkmarks, notes, and photos you and your team enter while using Trakkt.
• Activity records. An audit trail of changes to project data (who checked what, and when). This is a core feature: it is what makes Trakkt usable as a QA record.
• Technical logs. IP addresses in server logs and rate-limiting counters, kept for security purposes. We also keep a short history of the IP addresses your account has signed in from (up to the last 10) for new-device detection and account security, and a timestamp of when your account was last active.
• Waitlist. If you join the waitlist, we collect the email address, company, role, and kind of job you tell us about, plus the IP address and referring page of the submission (to prevent abuse). We use this only to contact you about access to Trakkt, and we remove it on request (email us).
• Notification subscriptions. If you turn on push notifications, we store the delivery token your browser provides. You can revoke it in your browser at any time.

We do not collect location data, contacts, advertising identifiers, or anything from your device beyond what is listed here. There is no third-party analytics or advertising code in Trakkt.

Cookies and local storage. Trakkt uses no advertising or analytics cookies or trackers. Your browser's local storage holds a sign-in token and, if you use offline mode, a local copy of your project data on your device. Both are removed by signing out or clearing site data in your browser.

To provide the service, keep accounts secure, deliver invitations and notifications you request, and maintain the project records your team relies on. We do not sell, license, or trade personal information; we do not use your data for advertising; and we do not use your data to train AI models, nor do we share it with any provider that does. Your project data is yours. We access it only to operate the service, investigate a problem you report, or as required by law.

Your application data (projects, cables, photos, and account records) is stored on commercial cloud infrastructure with data residency in Canada. However, when we send you email (invitations, password resets, and account notices), your name, email address, and the content of that message are processed by our email delivery provider in the United States. While your information is in the United States it is subject to United States law, and may be accessible to US courts, law enforcement, and national security authorities. We use contracts that require our providers to protect your information to a standard comparable to our own. All traffic between your device and Trakkt is encrypted with TLS, and backups are encrypted at rest. Additional detail about our hosting arrangement is available on request to prospective customers under a mutual non-disclosure agreement.

We use service providers in these categories, each strictly for what is listed:

• A commercial cloud hosting provider: stores the application and its database. Data residency in Canada.
• A transactional email delivery service in the United States: processes the email address and message content of invitations, password resets, and account emails we send you.
• Browser push notification relays operated by your browser vendor (for example Google or Apple): deliver push notifications, only if you enable them.

No other third party receives your information. Specific provider names are available on request to prospective customers under a mutual non-disclosure agreement.

Account and project data is kept for as long as the account or project is active. Project records often need to outlive an individual's involvement (they are QA documentation for constructed work), so removing a person from a project does not erase the audit history of work they recorded. If you want your account and personal information deleted, email us. We permanently delete your personal information within 30 days of the request, excluding anything we are legally required to retain (such as billing records). Security logs are kept for a limited period and then discarded.

• TLS encryption for all traffic.
• Passwords hashed with PBKDF2-SHA256 (260,000 iterations).
• Role-based access: your project data is visible only to people invited to that project.
• Uploaded photos and files are served only through expiring signed links, never publicly.
• Rate limiting on sign-in to slow credential attacks.

If a breach of our safeguards creates a real risk of significant harm to you, we will notify you and report it to the Privacy Commissioner of Canada as required by law, as soon as feasible.

Under PIPEDA and BC PIPA you can:

• Ask what personal information we hold about you, and get a copy.
• Ask us to correct inaccurate information.
• Withdraw consent and ask for your account to be deleted.
• Complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia if you believe we have mishandled your information.

To exercise any of these, email privacy@trakkt.ca. We respond within 30 days.

Privacy officer. Requests and complaints about personal information go to Trakkt's Privacy Officer at privacy@trakkt.ca, who responds within 30 days.

If this policy changes in a way that matters (new processor, new data category, new hosting location), we will update the effective date above and note the change on this page. We will not quietly weaken it.