TrackfoldPrivacy policy
Updated 25 October 2026. Trackfold is operated by Samet Ateşen, trading as Atesen Software, Sakarya, Türkiye. Contact support@atesensoftware.com.
What reaches us
CSV text is sent to our server for parsing and validation. Excel’s first worksheet is converted to CSV text in the browser, then sent to the server. The uploaded file is not stored. We read existing Xero categories and options and store encrypted plans containing Category, Option, NewName, Status and previous/result states.
Data and retention
- Xero user ID, name and email identify your sign-in. They are deleted on last disconnect, or within 30 days for an orphaned account.
- Xero tokens are encrypted at rest and deleted immediately on disconnect. We attempt to revoke the Xero connection.
- Unused preview plans expire after 24 hours. Completed job plans and undo details expire after 30 days from completion. Disconnect removes these encrypted plans immediately.
- Job rows and audit entries hold category/option IDs, file row number, action, reason codes, timestamps and idempotency keys. They contain no option names and are deleted after 12 months (365 days).
- Billing records hold Paddle customer, subscription and transaction IDs, plans and periods. Card details never reach us. Event receipts expire after 400 days; purchase and welcome-email deduplication records remain to prevent repeat processing.
- Our logs contain IDs, counts and codes, never option names, tokens or file contents. Cloudflare processes technical request information to serve the site.
Permissions
Scopes: openid profile email offline_access accounting.settings. Identity scopes support sign-in, offline_access permits token refresh, and accounting.settings permits reading and changing tracking options. We do not request invoice, payment, contact or attachment access.
Cookies
cl_session: essential sign-in, 14 days. cl_oauth: essential sign-in handshake, 10 minutes. cl_src: first referring host, landing path and UTM tags, 30 days. The last cookie is suppressed when Do Not Track or Global Privacy Control is enabled. No advertising pixels, analytics scripts or third-party cookies.
Processors and one purchase email
Cloudflare hosts the Worker and database. Xero is the data source you authorise. Paddle handles billing. If configured, Resend delivers one plain-text purchase thank-you and quick-start email. The address is read from Paddle for that send and is not stored; there are no tracking images or redirect links. Providers may process data internationally under their contractual safeguards.
Purpose and your rights
We use these records to provide the service, secure sign-in and apply purchases. We do not sell data or use Xero data for AI or machine-learning training. You may ask for access, correction, deletion or a portable copy through the support address. We answer data requests within 30 days. You may complain to the data protection authority where you live.
Disconnect
On Plan, Disconnect organisation removes tokens and encrypted plans immediately. Undo is then unavailable. The non-name job rows and audit codes remain for their stated 12-month period. Material policy changes will be posted here. Trackfold is a business service for adults.
