Privacy Policy
Last updated: August 19, 2026
This policy explains what personal data TinyTrack collects, why, and what you can do about it.
Who we are. TinyTrack (https://tinytrack.io) is operated by WELO MEDIA STUDIOS S.R.L., Romania. We are the data controller for the data described here. Contact: support@tinytrack.io.
1. What we collect
You give us:
- Name and email address, when you create an account
- Contact preferences
- Anything you send us in a support message
Collected automatically when you use the service:
- IP address, browser and device type, operating system, language, referring URL
- Log data: pages viewed, features used, timestamps, error reports
We do not collect special-category data (health, biometrics, political or religious beliefs, sexual orientation), and we do not ask for it. Please don't send it to us in support messages.
2. Why we process it, and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing your account; providing the service | Performance of a contract |
| Taking payment | Performance of a contract |
| Security, fraud prevention, debugging, service analytics | Legitimate interests |
| Marketing emails | Consent (withdraw any time via the unsubscribe link) |
| Responding to legal requests, keeping tax records | Legal obligation |
Where we rely on legitimate interests, we've weighed those against your rights; you can object at any time (see section 6).
3. Who we share it with
We do not sell your personal data, and we do not share it for advertising. We use a small number of processors who handle data on our behalf under contract:
- Stripe — payment processing (privacy policy)
- Cloudflare — website hosting (privacy policy)
- AWS — email provider (privacy policy)
- Anthropic — AI service provider (privacy policy)
- Gemini — AI service provider (privacy policy)
- Perplexity — AI service provider (privacy policy)
- OpenAI — AI service provider (privacy policy)
We may also disclose data where legally required, or in connection with a merger, acquisition or sale of the business.
4. AI features
TinyTrack offers AI-generated insights. To produce them, the relevant content is sent to our AI providers listed above, who process it on our behalf. They do not use it to train their models. We don't use AI to make decisions that have legal or similarly significant effects on you.
5. International transfers
Some of our providers process data outside the EEA. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us for details.
6. Your rights
If you're in the EEA or UK, you have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent at any time. Withdrawing consent doesn't affect processing that already happened.
Most of this you can do yourself in your account settings. Otherwise email support@tinytrack.io.
US residents: depending on your state, you may have rights to know, access, correct, delete, and obtain a copy of your personal data, and not to be discriminated against for exercising them. We don't sell or share personal data as those terms are defined under US state privacy laws. Email support@tinytrack.io to make a request.
7. How long we keep it
- Account data: for as long as your account is open, then deleted upon closure.
- Analytics and log data: 3 years.
- Invoices and tax records: 10 years, as required by Romanian law.
- Support emails: 2 years.
Backups are overwritten on a rolling basis, so deleted data may persist in backups for a short period before being purged.
8. Security
We use encryption in transit, access controls, and limit internal access to personal data to those who need it. No system is perfectly secure, so we can't guarantee absolute safety, but we'll notify you and the supervisory authority as required if a breach affects your data.
9. Cookies and Do Not Track
We use cookies that are necessary to keep you logged in and to keep the service secure. You can block cookies in your browser, though parts of the service may stop working. We don't currently respond to Do Not Track signals, as there's no agreed standard for them.
10. Changes
We may update this policy. If the changes are material, we'll email you or post a notice in the app before they take effect. The date at the top always reflects the current version.
11. Contact
If you have questions or requests: support@tinytrack.io.