Privacy Policy

What this policy covers

This policy explains what information PalaTrack collects when you or your team use it, how that information is stored, and who can see it. PalaTrack is a lead-tracking tool used by companies and their teams to manage leads and pipelines — each company's data is kept in its own private workspace, accessible only to people who have signed up or been invited to that workspace.

Information we collect

When you create an account or are invited to PalaTrack, we store:

• Account details: your name, email address, phone number, company, role, and a profile photo if you choose to add one.
• Lead and client data: the names, companies, contact details, and deal information that you or your teammates enter into the tracker.
• Usage preferences: your chosen language and light/dark mode setting.

How your information is used

Your information is used only to operate PalaTrack for your team: displaying your profile to teammates, tracking leads and revenue, generating statistics, and letting administrators manage who has access. We do not sell, rent, or share this information with any third party for advertising or marketing purposes.

Where your data is stored

PalaTrack is built on Google Firebase, a cloud infrastructure platform. Your account information and lead data are stored in Firebase's Firestore database and protected by security rules that only allow signed-in team members to access data belonging to your organization's boards.

Who can see your data

Only people who have been explicitly invited to your PalaTrack workspace can sign in and view boards, leads, and team information. Within the workspace, all authenticated team members can see shared boards and leads by design, since PalaTrack is built as a shared team tool. Administrators additionally have the ability to manage team member roles.

Feedback you send us

If you submit feedback through the Feedback form, we store your message along with your name and email (if you're signed in) so we can follow up or ask clarifying questions. Feedback is used solely to improve PalaTrack and is not shared outside PalaTrack.

Data retention

Your information is retained for as long as your account remains active. If you leave the organization, an administrator can remove your account, at which point your personal profile information is deleted. Historical lead and deal records tied to shared boards may be retained as part of the team's business records.

Your choices

You can update your name, phone number, company, role, language, and profile photo at any time from Manage account. If you'd like your account fully removed, contact your administrator or use the Feedback form to reach us directly.

Connecting your Gmail account

PalaTrack offers an optional feature that lets you connect your own Gmail account so that emails you send to leads come from your real address instead of a shared one. This section explains exactly what that involves.

What we ask for: when you click "Connect Gmail," Google asks you to approve two permissions: the ability to send email on your behalf, and read-only access to your mailbox. PalaTrack never requests permission to delete or change your email, or to access your contacts or any other Google Account data.

How it's used: the send permission is only used for emails you create in PalaTrack: messages you send to a lead yourself, and follow-up steps you scheduled in a sequence you started. Nothing is ever sent that you didn't write and set up. The read-only permission is used for one thing only: checking the email conversations PalaTrack started with your leads for a reply, so a reply shows up in that lead's history and any remaining follow-ups for that lead stop. PalaTrack only looks at those specific conversations, and stops checking a conversation 30 days after the last email was sent. It does not read, scan, or store any other email in your mailbox.

What we store from replies: when a lead replies, we store the reply's sender, subject, time and text (up to 5,000 characters) in that lead's email history, visible to your workspace like the rest of the lead's history.

What we store: we store a security token that lets PalaTrack send on your behalf without asking you to sign in every time, along with the email address of the account you connected (so we can show you "Connected as you@example.com"). This token is stored securely and is never visible to any other user, including workspace administrators — it can only be used by PalaTrack's own sending system, and only to send messages you initiate.

Disconnecting: you can disconnect your Gmail account at any time from Manage account. Disconnecting immediately and permanently deletes the stored token. If you haven't connected an account, or after you disconnect, emails you send from PalaTrack use a shared PalaTrack sending address instead, with your name and your real address set as the reply-to.

Connecting your LinkedIn account

The LinkedIn post composer offers an optional "Connect LinkedIn" feature. It lets the post preview show your real LinkedIn profile picture and name, and lets PalaTrack publish posts you schedule to your LinkedIn profile. This section explains exactly what that involves.

What we ask for: when you click "Connect LinkedIn," LinkedIn asks you to approve two things: its standard "Sign In with LinkedIn" permissions (openid, profile and email), which give PalaTrack your name, profile picture, email address and a LinkedIn account identifier; and permission to create posts on your behalf (w_member_social). PalaTrack does not request, and cannot get, access to your connections, messages, or other people's content, and it cannot read your existing posts.

How it's used: your LinkedIn name and profile picture are used to show how your posts will look in the post preview inside PalaTrack. The posting permission is used only for posts you explicitly choose to publish: a post you scheduled with "Publish automatically" turned on (published at the time you picked), or a post you clicked "Publish now" on. PalaTrack publishes exactly the text, photos or video of that post, as it was when it was published, to your own LinkedIn profile, publicly. It never posts anything else, never comments, likes or messages anyone, and never posts to company pages. Your email address is not stored or used.

What we store: a copy of your profile picture (stored in our Firebase file storage, because LinkedIn's picture links expire), your LinkedIn name, your LinkedIn account identifier, and the LinkedIn access token that allows publishing. The access token is stored securely on our servers, is never visible to you, other users or workspace administrators, and is only used by PalaTrack's publishing system for the posts described above. LinkedIn makes this token expire after about 60 days; after that, nothing more can be published until you reconnect. For posts that were published, we also store the link to the post on LinkedIn. Your LinkedIn picture and name are visible to members of your workspace in the same places as the rest of your profile.

Disconnecting: you can disconnect at any time in the LinkedIn post composer. Disconnecting immediately deletes the stored access token, picture, name and identifier, and no further posts will be published. Posts already published on LinkedIn stay there until you delete them on LinkedIn. You can also revoke PalaTrack's access from your LinkedIn settings (Settings → Data privacy → Permitted services).

AI post ideas

The LinkedIn post composer has an optional "Post ideas" feature that suggests post ideas and writes drafts. When you use it, PalaTrack sends the settings you chose (such as topic, goal and tone), your name, your LinkedIn headline and the text of up to 10 of your recent posts in PalaTrack to Anthropic, the company behind the Claude AI models, which generates the ideas. This is only sent when you click to generate ideas or write a draft. Anthropic processes this data to provide the service to us, under its commercial terms for API customers. Ideas you save are stored in your PalaTrack account, visible only to you. Always review AI-written drafts before posting them.

PalaTrack – LinkedIn Capture (Chrome extension)

PalaTrack – LinkedIn Capture is a Chrome extension that lets you save a LinkedIn profile as a lead in your PalaTrack workspace in one click. This section explains what the extension does with data, in addition to everything above.

What it reads: when you click the extension icon on a LinkedIn profile page, it reads the name, job title, company, and location visible on that page. It only reads the single page you are actively viewing at the moment you click it — it does not run in the background, browse LinkedIn on its own, or collect data from any page you have not explicitly opened.

What it stores: the profile information you choose to save is written to your own PalaTrack workspace, in the exact same Firebase database used by the PalaTrack website. It is not sent anywhere else, and no separate copy is kept by the extension itself.

Signing in: the extension uses the same email and password as your PalaTrack account. Your credentials are sent directly to Firebase Authentication to sign you in — the extension does not store your password.

Permissions it uses: the extension requests access to linkedin.com (to read the profile page you are viewing), a small amount of local browser storage (to remember your PalaTrack site address after you enter it once), and Firebase's authentication and database services (to sign you in and save leads). It does not request access to any other websites, browsing history, or device location.

Third parties: data captured through the extension is never sold, shared, or transferred to any third party outside of Firebase (Google Cloud), which exists solely to store your own workspace's data securely.

Questions

If you have any questions about this policy or how your data is handled, please use the Send Feedback option in Settings, or reach out to your PalaTrack administrator directly.