BriteTrack — Privacy Policy
Last updated: August 21, 2026
This is a working draft, not legal advice. Have a lawyer review this before you rely on it, especially before accepting payment or users outside your home country/state.
1. Overview
This Privacy Policy explains what information BriteTrack ("we," "us") collects, how we use it, and your rights regarding it. BriteTrack is a financial organization tool for real estate agents.
2. What we collect
- Account information — Email address (used for login via magic link — we don't store passwords).
- Deal and financial data you enter — Property addresses, gross commission amounts, broker split percentages, deal costs (marketing, staging, closing gifts, mileage), deal status, recurring and logged expenses (e.g., MLS dues, insurance, client lunches), and tax settings: country, state, tax reserve percentage, Hawaii GET percentage (if applicable), license issue date.
- Payment information (if you subscribe to a paid plan) — Payment processing is handled entirely by Stripe. We do not store your full card number or payment credentials ourselves.
- Usage information — Basic technical information (e.g., browser type, general usage patterns) may be collected to maintain and improve the Service.
3. How we use your information
We use your information to:
- Provide the core functionality of BriteTrack (deal tracking, tax reserve estimates, budget tracking, renewal reminders).
- Calculate the estimates and reminders you see in the app, based on the data and settings you provide.
- Process payments for paid subscriptions, via Stripe.
- Communicate with you about your account (e.g., login links, important service updates, billing notices).
- Improve and maintain the Service.
4. What we don't do
- We do not sell your personal or financial data to third parties.
- We do not share your deal or financial data with other users, brokerages, or third parties without your consent, except as required to provide the Service (e.g., a team/brokerage administrator you've joined may see deal-level summaries, not personal expense detail).
- We do not use your financial data for advertising purposes.
5. Cookies and tracking technologies
BriteTrack uses a minimal set of cookies and similar technologies required for the Service to function — for example, to keep you signed in between visits. We do not currently use third-party advertising or cross-site tracking cookies. If that changes, this policy will be updated in advance.
Some browsers offer a "Do Not Track" setting. Because there isn't yet a common industry standard for how to respond to these signals, BriteTrack does not currently change its behavior based on Do Not Track signals.
6. Third-party services we rely on
BriteTrack is built on the following infrastructure providers, each of which processes data on our behalf:
- Supabase — database hosting and authentication.
- Vercel — application hosting.
- Stripe — payment processing (for paid subscriptions).
Each of these providers has its own privacy and security practices. We choose providers with strong industry-standard security practices, but no system is 100% immune to risk.
7. Data security
We take reasonable technical measures to protect your data, including database-level access controls that ensure only you (and, for team/brokerage plans, authorized members of your workspace) can access your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
If you use the calendar subscription feature, we generate a unique, unguessable link that feeds your reminder dates (license renewal, tax payment due dates, recurring bills) into your calendar app. Anyone with this link can view those dates, so treat it like a password and avoid sharing it. You can invalidate and regenerate this link at any time from Account Settings if you believe it has been exposed.
8. Data retention and deletion
- We retain your data for as long as your account is active, including during any period where your subscription has lapsed or been canceled but the account itself has not been deleted.
- You can export your own data at any time as a JSON file, and delete your own account at any time, both self-serve from Account Settings — you do not need to contact us to do either.
- Some information may be retained where required by law (e.g., payment records for tax/accounting purposes), even after an account deletion request.
- We also retain your email address after account deletion for the limited purpose of enforcing our one-free-trial-per-person policy (see Terms of Service, Section 7). This record contains only the email address and the date a trial was granted — no deal, expense, or other account data is kept. This lets us prevent the same person from repeatedly deleting and recreating an account to claim multiple free trials, while still fully deleting all of your actual account data as described above.
9. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data. Contact us at alex.fudge@gmail.com to exercise these rights.
10. Children's privacy
BriteTrack is not intended for use by anyone under 18. We do not knowingly collect data from minors.
11. International users
If you access BriteTrack from outside the United States — including from Australia, where we're currently gathering early feedback — your data will be processed in accordance with this policy and stored on infrastructure located in the United States (via our hosting and database providers). By using BriteTrack from outside the US, you consent to this transfer and storage. If BriteTrack expands to serve users in the EU or UK in the future, this policy will be updated to add the additional disclosures required under GDPR/UK GDPR before that expansion.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated where reasonably possible. Continued use of BriteTrack after changes take effect constitutes acceptance of the updated policy.
13. Contact
Questions about this policy or your data? Contact us at alex.fudge@gmail.com.