Privacy Policy
This policy explains how TraxPoint collects, uses, discloses, retains, and protects information when companies and their authorized users use the TraxPoint service.
1. Scope and business accounts
This Privacy Policy applies to TraxPoint, a TraxHQ product, including the TraxPoint web, mobile, and progressive web app experiences and related support services. TraxPoint is designed primarily for restaurant and hospitality businesses and the authorized users those businesses invite to their accounts.
A company account owner or administrator controls who may access the company workspace and what operational information the company chooses to enter. Individual users should direct company-specific access or correction questions to their company administrator when the requested information is controlled by that organization.
2. Information we collect
We collect account and contact information such as name, email address, company name, role, assigned locations, authentication information, and support communications. We also process business data entered or uploaded to TraxPoint, including inventory, suppliers, barcodes, purchase and receiving activity, invoices and invoice images, recipes, catering information, sales and PMIX data, transfers, counts, costs, reports, and related notes.
When you use the service, we may collect technical and diagnostic information such as device and browser type, app version, approximate network information, session and authentication events, feature usage, sync state, error logs, and performance data. The web app may use cookies, local storage, or similar device storage that is necessary to maintain sessions, preferences, security state, and cached application data.
Payment card details are handled by third-party payment processors used for subscription billing. TraxPoint does not need to store a complete payment card number in the application database to provide subscription access.
3. How information is collected
Information may be provided directly by you, supplied by another authorized user in your company, generated through your use of the service, or received from service providers used to operate authentication, billing, communications, hosting, diagnostics, and other product functions.
When you choose an AI-assisted feature, the content needed to perform that feature may be sent to technology providers that help generate or analyze the requested result. AI-assisted features are optional operational tools and should not be used to submit information that your company is not authorized to process.
4. How we use information
We use information to create and secure accounts; provide inventory, recipe, purchasing, invoice, PMIX, reporting, and other operational workflows; synchronize authorized company data; process subscriptions; respond to support requests; detect abuse; troubleshoot failures; and improve reliability and usability.
We may use aggregated or de-identified information to understand product performance, identify feature trends, and improve TraxPoint where that information is not reasonably capable of identifying an individual or revealing another company’s confidential operational records.
Where applicable law requires a legal basis for processing, processing may be based on performing our agreement, our legitimate interests in operating and securing the service, consent where requested, or compliance with legal obligations.
5. How information is disclosed
Company data is intended to be available only to authorized users and administrators within the appropriate company and location scope, subject to TraxPoint role and access controls. Support personnel may access customer information only when reasonably necessary to provide authorized support, investigate security or reliability issues, or perform other permitted service operations.
We may disclose information to service providers that support hosting and infrastructure, database and authentication services, payment processing, email and communications, diagnostics, customer support, file processing, and AI-assisted functionality. These providers receive information only as reasonably necessary to provide their services to us.
We may also disclose information when required by law, legal process, or a valid government request; to protect the rights, safety, security, or integrity of TraxPoint, our customers, or others; or as part of a merger, financing, acquisition, reorganization, or sale of assets subject to appropriate confidentiality protections. We do not sell customer operational data for money or use it to serve third-party targeted advertising.
6. Company access, locations, and permissions
TraxPoint uses company, role, and location controls to limit access to business information. Account owners and authorized administrators are responsible for assigning appropriate roles, removing users who no longer need access, reviewing location assignments, and protecting shared operational information within their organization.
Users are responsible for protecting their credentials and devices. If you believe an account or company workspace has been accessed without authorization, contact your company administrator and support@traxpoint.net promptly.
7. Data retention and deletion
We retain information for as long as reasonably necessary to provide the service, maintain security and audit records, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business recordkeeping. Different categories of information may be retained for different periods.
Where TraxPoint offers a scheduled account-deletion workflow, the app may provide a 60-day grace period before permanent deletion so an authorized account can be reactivated. After the applicable deletion process completes, information is deleted or de-identified subject to legal obligations, fraud and security records, technical backup cycles, and information that must be retained to establish or defend legal claims.
Deleting an individual user does not necessarily require deletion of business records owned by the company account, such as inventory history, invoices, reports, or audit records. Company administrators may request exports or account-level deletion through available settings and support workflows.
8. Security
TraxPoint uses technical and organizational measures designed to protect information, including authenticated access, role and company isolation controls, encrypted network connections, provider-supported encryption at rest, and monitoring or diagnostics used to identify failures and suspicious activity.
No online service can guarantee absolute security. Customers should use strong unique passwords, protect devices and email accounts, assign the minimum access needed for each user, and promptly remove access that is no longer required.
9. Your privacy choices and rights
Authorized users can update certain account information in the service. Company administrators may manage users and locations, and available settings may allow company data exports or deletion requests. Privacy requests can also be sent to support@traxpoint.net.
Depending on your jurisdiction and applicable exemptions, you may have rights to request access, correction, deletion, or portability of certain personal information, or to object to or restrict certain processing. We may need to verify identity, authority, and company relationship before completing a request, and some information may be retained where permitted or required by law.
We will not discriminate against a person for exercising a privacy right protected by applicable law. Authorized agents may submit requests where local law permits, subject to verification of their authority.
10. International processing and children
TraxPoint and its service providers may process information in the United States and other locations where they operate. Data protection laws in those locations may differ from the laws where a user is located, and we use appropriate contractual or operational safeguards where required.
TraxPoint is a business operations service and is not directed to children under 13. We do not knowingly create consumer accounts for children under 13. Businesses are responsible for ensuring that any employee access they authorize complies with applicable employment, privacy, and age-related laws.
11. Changes to this policy
We may update this Privacy Policy as the product, service providers, or legal requirements change. Material changes will be reflected by an updated date and may also be communicated through the service or other reasonable channels when appropriate.
Continued use of TraxPoint after an updated policy becomes effective is subject to the updated policy, except where applicable law requires additional notice or consent.
Privacy questions or requests
Contact support@traxpoint.net for privacy, access, export, correction, or deletion questions. Company users should include the company name and use the email address associated with their TraxPoint account when possible.