Privacy Policy

This policy explains what information PalaTrack collects when you or your team use it, how that information is stored, and who can see it. PalaTrack is a lead-tracking tool used by companies and their teams to manage leads and pipelines — each company's data is kept in its own private workspace, accessible only to people who have signed up or been invited to that workspace.

When you create an account or are invited to PalaTrack, we store:

• Account details: your name, email address, phone number, company, role, and a profile photo if you choose to add one.
• Lead and client data: the names, companies, contact details, and deal information that you or your teammates enter into the tracker.
• Usage preferences: your chosen language and light/dark mode setting.

Your information is used only to operate PalaTrack for your team: displaying your profile to teammates, tracking leads and revenue, generating statistics, and letting administrators manage who has access. We do not sell, rent, or share this information with any third party for advertising or marketing purposes.

PalaTrack is built on Google Firebase, a cloud infrastructure platform. Your account information and lead data are stored in Firebase's Firestore database and protected by security rules that only allow signed-in team members to access data belonging to your organization's boards.

Only people who have been explicitly invited to your PalaTrack workspace can sign in and view boards, leads, and team information. Within the workspace, all authenticated team members can see shared boards and leads by design, since PalaTrack is built as a shared team tool. Administrators additionally have the ability to manage team member roles.

If you submit feedback through the Feedback form, we store your message along with your name and email (if you're signed in) so we can follow up or ask clarifying questions. Feedback is used solely to improve PalaTrack and is not shared outside PalaTrack.

Your information is retained for as long as your account remains active. If you leave the organization, an administrator can remove your account, at which point your personal profile information is deleted. Historical lead and deal records tied to shared boards may be retained as part of the team's business records.

You can update your name, phone number, company, role, language, and profile photo at any time from Manage account. If you'd like your account fully removed, contact your administrator or use the Feedback form to reach us directly.

PalaTrack offers an optional feature that lets you connect your own Gmail account so that emails you send to leads come from your real address instead of a shared one. This section explains exactly what that involves.

What we ask for: when you click "Connect Gmail," Google asks you to approve two permissions: the ability to send email on your behalf, and read-only access to your mailbox. PalaTrack never requests permission to delete or change your email, or to access your contacts or any other Google Account data.

How it's used: the send permission is only used for emails you create in PalaTrack: messages you send to a lead yourself, and follow-up steps you scheduled in a sequence you started. Nothing is ever sent that you didn't write and set up. The read-only permission is used for one thing only: checking the email conversations PalaTrack started with your leads for a reply, so a reply shows up in that lead's history and any remaining follow-ups for that lead stop. PalaTrack only looks at those specific conversations, and stops checking a conversation 30 days after the last email was sent. It does not read, scan, or store any other email in your mailbox.

What we store from replies: when a lead replies, we store the reply's sender, subject, time and text (up to 5,000 characters) in that lead's email history, visible to your workspace like the rest of the lead's history.

What we store: we store a security token that lets PalaTrack send on your behalf without asking you to sign in every time, along with the email address of the account you connected (so we can show you "Connected as you@example.com"). This token is stored securely and is never visible to any other user, including workspace administrators — it can only be used by PalaTrack's own sending system, and only to send messages you initiate.

Disconnecting: you can disconnect your Gmail account at any time from Manage account. Disconnecting immediately and permanently deletes the stored token. If you haven't connected an account, or after you disconnect, emails you send from PalaTrack use a shared PalaTrack sending address instead, with your name and your real address set as the reply-to.

PalaTrack offers an optional feature that connects your Google Calendar, so your PalaTrack tasks and calls appear in your calendar and your appointments appear in PalaTrack's calendar.

What we ask for: when you click "Connect Google Calendar," Google asks you to approve two permissions: calendar.app.created, which lets PalaTrack create one calendar called "PalaTrack" and manage only that calendar, and calendar.events.readonly, which lets PalaTrack read the events in your calendars without ever changing them. Google also shares your email address, so we can show which account is connected.

How it's used: PalaTrack adds, updates and removes your PalaTrack tasks and calls in the "PalaTrack" calendar it created. It cannot change or delete anything in your other calendars. Your existing appointments are read only to show them next to your tasks in PalaTrack's calendar, so you can plan around them.

What we store: a security token that lets PalaTrack keep your calendar in sync, the connected email address, and the identifier of the "PalaTrack" calendar. Appointments read from your calendar are shown to you and are not stored in our database.

Disconnecting: you can disconnect at any time from the Calendar page. Disconnecting deletes the stored token and removes the "PalaTrack" calendar that PalaTrack created. Your other calendars are never touched.

In the Library you can export a page to Google Docs. When you do, Google asks you to approve the drive.file permission, which only gives PalaTrack access to files that PalaTrack itself creates. PalaTrack cannot see, read or change any other file in your Google Drive.

How it's used: PalaTrack creates a new Google Doc with the content of the page you chose to export, and opens it for you. The permission is only kept in your browser for that session and is not stored by PalaTrack.

PalaTrack's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

In practice, this means:

• We only use Google user data (from Gmail, Google Calendar and Google Drive) to provide the features described above, which you can see and control in PalaTrack.
• We do not sell Google user data, and we do not use it for advertising.
• We do not transfer Google user data to anyone, except when needed to provide these features, to comply with the law, or as part of a merger or acquisition (with notice to you).
• No one at PalaTrack reads your Google user data, unless you ask us to for support, it is needed for security or to comply with the law.
• Google user data is never used to create, train or improve artificial intelligence or machine learning models, and it is never sent to an AI service.

AI services we use: PalaTrack uses one third-party AI provider, Anthropic (the Claude API), for these features: the Alexandre AI assistant, AI post ideas and drafts in the LinkedIn post composer, and Offer Doc. These features only process what you type or choose to send to them, such as your post settings or your offer details. They do not receive any data from Gmail, Google Calendar or Google Drive. Anthropic does not use data sent through its commercial API to train its models.

Removing access: besides disconnecting inside PalaTrack, you can remove PalaTrack's access to your Google account at any time at myaccount.google.com/permissions. To have data we stored from your Google account deleted, disconnect the integration or email us at info@palatrack.com.

The LinkedIn post composer offers an optional "Connect LinkedIn" feature. It lets the post preview show your real LinkedIn profile picture and name, and lets PalaTrack publish posts you schedule to your LinkedIn profile. This section explains exactly what that involves.

What we ask for: when you click "Connect LinkedIn," LinkedIn asks you to approve two things: its standard "Sign In with LinkedIn" permissions (openid, profile and email), which give PalaTrack your name, profile picture, email address and a LinkedIn account identifier; and permission to create posts on your behalf (w_member_social). PalaTrack does not request, and cannot get, access to your connections, messages, or other people's content, and it cannot read your existing posts.

How it's used: your LinkedIn name and profile picture are used to show how your posts will look in the post preview inside PalaTrack. The posting permission is used only for posts you explicitly choose to publish: a post you scheduled with "Publish automatically" turned on (published at the time you picked), or a post you clicked "Publish now" on. PalaTrack publishes exactly the text, photos or video of that post, as it was when it was published, to your own LinkedIn profile, publicly. It never posts anything else, never comments, likes or messages anyone, and never posts to company pages. Your email address is not stored or used.

What we store: a copy of your profile picture (stored in our Firebase file storage, because LinkedIn's picture links expire), your LinkedIn name, your LinkedIn account identifier, and the LinkedIn access token that allows publishing. The access token is stored securely on our servers, is never visible to you, other users or workspace administrators, and is only used by PalaTrack's publishing system for the posts described above. LinkedIn makes this token expire after about 60 days; after that, nothing more can be published until you reconnect. For posts that were published, we also store the link to the post on LinkedIn. Your LinkedIn picture and name are visible to members of your workspace in the same places as the rest of your profile.

Disconnecting: you can disconnect at any time in the LinkedIn post composer. Disconnecting immediately deletes the stored access token, picture, name and identifier, and no further posts will be published. Posts already published on LinkedIn stay there until you delete them on LinkedIn. You can also revoke PalaTrack's access from your LinkedIn settings (Settings → Data privacy → Permitted services).

The LinkedIn post composer has an optional "Post ideas" feature that suggests post ideas and writes drafts. When you use it, PalaTrack sends the settings you chose (such as topic, goal and tone), your name, your LinkedIn headline and the text of up to 10 of your recent posts in PalaTrack to Anthropic, the company behind the Claude AI models, which generates the ideas. This is only sent when you click to generate ideas or write a draft. Anthropic processes this data to provide the service to us, under its commercial terms for API customers. Ideas you save are stored in your PalaTrack account, visible only to you. Always review AI-written drafts before posting them.

PalaTrack – LinkedIn Capture is a Chrome extension that lets you save a LinkedIn profile as a lead in your PalaTrack workspace in one click. This section explains what the extension does with data, in addition to everything above.

What it reads: when you click the extension icon on a LinkedIn profile page, it reads the name, job title, company, and location visible on that page. It only reads the single page you are actively viewing at the moment you click it — it does not run in the background, browse LinkedIn on its own, or collect data from any page you have not explicitly opened.

What it stores: the profile information you choose to save is written to your own PalaTrack workspace, in the exact same Firebase database used by the PalaTrack website. It is not sent anywhere else, and no separate copy is kept by the extension itself.

Signing in: the extension uses the same email and password as your PalaTrack account. Your credentials are sent directly to Firebase Authentication to sign you in — the extension does not store your password.

Permissions it uses: the extension requests access to linkedin.com (to read the profile page you are viewing), a small amount of local browser storage (to remember your PalaTrack site address after you enter it once), and Firebase's authentication and database services (to sign you in and save leads). It does not request access to any other websites, browsing history, or device location.

Third parties: data captured through the extension is never sold, shared, or transferred to any third party outside of Firebase (Google Cloud), which exists solely to store your own workspace's data securely.

If you have any questions about this policy or how your data is handled, please use the Send Feedback option in Settings, or reach out to your PalaTrack administrator directly.