Trust Center

Trust & Security

This page is maintained by Trakkify to answer common security and privacy questions about Trakkify Connect. It describes our current practices — it is not an independent certification or audit report.

Access & authentication

  • Email/password and Google sign-in, with sessions handled by our managed auth provider.
  • Every workspace's data is isolated by row-level access rules enforced in the database.
  • Team members only see records belonging to their own workspace.

Data in transit & at rest

  • All traffic is served over HTTPS with modern TLS (256-bit).
  • Data is stored on managed cloud infrastructure with encryption at rest.
  • Integration credentials and API secrets are stored encrypted and never exposed to the browser.

Personal data sent to ad platforms

  • Email and phone values are hashed with SHA-256 (phone normalised to E.164) before any conversion upload.
  • Meta Conversions API and Google Ads uploads carry deduplication IDs to avoid double counting.
  • Google Consent Mode v2 signals are passed through with every event.

Consent & cookies

  • A cookie banner captures marketing/analytics consent and records the consent version.
  • Events are suppressed when a visitor has not granted marketing consent.
  • Consent history is viewable and exportable from your workspace settings.

Subprocessors & integrations

  • Managed cloud database, auth and hosting providers.
  • Meta (Conversions API), Google Ads, WhatsApp Business Platform, Shopify, and email delivery providers — only when you connect them.
  • You can disconnect any integration at any time from Settings.

Retention, deletion & privacy requests

  • You can delete leads, orders and campaign records from the app at any time.
  • Workspace deletion removes associated records from production systems.
  • Send access, correction or deletion requests to privacy@trakkify.in.

Incident response & vulnerability reporting

  • Security issues can be reported to security@trakkify.in; we acknowledge reports within two business days.
  • We investigate reported issues, remediate, and notify affected customers where required by law.

Shared responsibility

We secure the platform, hosting and data isolation. As the account owner you are responsible for who you invite, the consent you collect from your own customers, and the content you send through connected channels.

See also our Privacy Policy and Terms of Service.