Effective Date: August 5, 2026
This Privacy Policy explains how Coam Tracker, LLC ("Coam Tracker," "we," "us," or "our") collects, uses, and shares information in connection with the Coam Tracker application and website (the "Service"). By using the Service, you agree to the collection and use of information as described here.
Account information: when you or your business creates an account, we collect your email address, a chosen username, your store name, and a password. If you configure a screen-lock PIN, it is stored as a one-way cryptographic hash — we do not store or have access to your actual PIN.
Transaction and business data: information you enter while using the Service, including redemption amounts and categories (such as lottery, gift card, and replay redemptions), gift card codes and balances, and daily Total In / Total Out reconciliation figures. This data belongs to you; see Section 5.
Payment information: when you subscribe, payment is handled directly by our payment processor, Stripe. We do not receive or store your full card number. We retain a record that a payment was made, the plan selected, and billing history.
Device and usage information: basic technical information such as browser type, device type, and general usage of the Service, collected automatically to operate and improve the Service.
We use the information we collect to provide, operate, and maintain the Service, including your account, reports, and gift card features; to process payments and manage your subscription; to send you service-related emails such as account confirmations, password reset links, and billing notices; to detect, prevent, and address technical issues, fraud, or misuse of the Service; and to communicate with you about the Service, including updates to these policies.
We do not sell your personal information, and we do not use your business or transaction data to market to your customers.
We rely on a small number of trusted third-party providers to operate the Service, including Stripe (payment processing — they receive your payment details directly; we never receive or store your full card number), Supabase (database hosting and backend infrastructure), Resend (email delivery for account and billing notifications), and Cloudflare (web hosting and content delivery). Each is contractually or by policy restricted from using your information for any purpose other than providing services to us.
We use reasonable administrative and technical safeguards to protect your information, including encrypted connections (HTTPS), password hashing, PIN hashing, and database-level access controls that restrict each account to its own data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You own the business and transaction data you enter into the Service. You may export your data at any time using the Service's built-in backup and export features.
Voided transactions are retained, rather than permanently deleted, for audit-trail purposes consistent with recordkeeping practices for regulated activity such as lottery and gift card redemptions; voided records are excluded from your reports and totals but remain visible to you in the Service's Voided Records view.
If you cancel your account, we retain your data for a reasonable period afterward in case you wish to reactivate or export it, after which it may be deleted from active systems, subject to standard backup retention cycles and any legal obligation to retain records longer.
You can access, update, or export most of your account and business data directly within the Service, and you can request deletion of your account by contacting us. You can also unsubscribe from non-essential emails; you will still receive essential account and billing emails while your subscription is active.
The Service uses browser local storage and similar technologies to keep you signed in, remember your preferences (such as theme), and support offline functionality. We do not use third-party advertising cookies.
The Service is intended for business use by adults operating a retail store and is not directed to children under 18. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. Material changes will be communicated to you, such as by email or in-app notice. The "Effective Date" above reflects the latest revision.
Questions about this Privacy Policy may be directed to: CoamTracker@proton.me.