HELLOTRACKS PRIVACY POLICY

Last Updated: May 27, 2026

Introduction

Hellotracks, operated by Hellotracks LLC ("Hellotracks," "we," or "our") recognizes the importance of your personal privacy. This Privacy Policy explains how we collect, use, and disclose your data when you use our website at www.hellotracks.com, our related mobile website, and the "Hellotracks" mobile application (the "App") (collectively, the "Websites") and the associated service (the "Service").

Key aspects of our privacy practices include:

• The data that we collect and why we collect it
• How we use that data
• How we share data, including with subprocessors
• The rights you have regarding your data

GDPR Compliance

Hellotracks is fully compliant with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). We act as a data controller with respect to personal data we process about you, and are committed to processing personal data lawfully, fairly, and transparently. Our legal bases for processing personal data include:

• Performance of a contract: where processing is necessary to provide the Service you have requested.
• Legitimate interests: where we have a legitimate business interest in processing your data that is not outweighed by your rights.
• Consent: where you have freely given, specific, informed, and unambiguous consent.
• Legal obligation: where processing is required to comply with applicable law.

We will only transfer your personal data outside of the European Economic Area (EEA) under the following circumstances: (a) the transfer is to a country the European Commission has assessed as ensuring adequate data protection; (b) you have given explicit consent; or (c) the transfer is otherwise compliant with the GDPR.

Server and Data Hosting Location

Our servers are maintained and operated in Germany, within the European Economic Area. By using the Service, you freely and specifically give us your consent to store and process your personal data in Germany in accordance with this Privacy Policy. Data stored in Germany may be subject to lawful requests by courts or law enforcement authorities within the European Union. All data processing on our infrastructure complies with GDPR requirements.

Personal Data That We Collect

You may be required to submit personal data when you register for and use our Service. Personal data we may collect includes:

• Your name and username
• Contact information (phone number, mailing address, and email address)
• Information about your company
• Your photo
• Your IP address
• Precise location data when the mobile application is running, if you have granted location permissions
• Server login credentials, configurations, and access logs where necessary for service operation

Hellotracks also collects information when you message other members through the Service and may retain messages you send to us. We use this data to operate, maintain, and provide the features and functionality of the Service.

Non-Personal Data That We Collect

When you access our Service, we may automatically collect non-personal data such as device information, web pages viewed, browser type, operating system, page views, and similar data. We may aggregate demographic information in a manner that does not identify any individual. If you believe we have inadvertently collected your personal information, please notify us at support@hellotracks.com.

Analytics and Tracking Technologies

We use Simple Analytics to help us understand how visitors interact with our Service. Simple Analytics is a privacy-first analytics platform that does not use cookies and does not collect personal data or track individuals across websites. It provides only aggregated, anonymized statistics.

We do not use Google Analytics or any analytics service that tracks individual users using cookies or cross-site identifiers.

We may also use the following technologies on our Service:

• Browser cookies: small files placed on your device to enable core functionality and personalization. You can disable cookies in your browser settings, though some features may not work properly.
• Web beacons: small electronic files in pages or emails used to count visitors and measure content engagement.
• Flash cookies: locally stored objects used to record preferences, managed separately from browser cookies.

How We Use Your Information

We use the information we collect about you to:

• Present our Website and its contents to you
• Provide information, products, or services you request
• Fulfill contracts entered into between you and us, including billing and collection
• Notify you about changes to the Service
• Enable location sharing with individuals you choose
• Respond to inquiries, resolve support issues, and send service updates
• Contact you about our products and services (where you have consented or where we have a legitimate interest)
• Comply with legal and regulatory obligations

Disclosure of Your Information

We do not sell your personal data. We may disclose personal data in the following circumstances:

• To subprocessors and service providers who are contractually bound to protect your data (see Subprocessors section below).
• To subsidiaries and affiliates with substantially similar privacy practices.
• To a buyer or successor in the event of a merger, acquisition, or restructuring.
• To third parties where you have provided consent.
• To comply with a court order, law, or legal process, including government or regulatory requests.
• To enforce our terms of use or to protect the rights, property, or safety of our users or others.
• Location data is shared only with individuals you designate through the application.

Subprocessors

We engage the following third-party subprocessors to assist in delivering the Service. All subprocessors are contractually required to process data only on our documented instructions, to maintain appropriate technical and organizational security measures, and to comply with applicable data protection laws. Where subprocessors are located outside the EEA, transfers are made under appropriate safeguards such as Standard Contractual Clauses.

The broader Hellotracks web application utilizes third-party service providers to facilitate our Service, including Simple Analytics for privacy-first analytics, Mapbox and Google Maps for mapping and geocoding services, Stripe for payment processing and billing, Help Scout for customer support, and Cloudflare Turnstile for security and bot prevention.

This subprocessor list is kept current. We will provide at least 30 days' notice before adding new subprocessors that materially affect data processing. The current list is always reflected in the latest version of this Privacy Policy.

monday.com embedded app

When Hellotracks is used inside monday.com, the embedded Hellotracks app does not use browser cookies for authentication and does not use advertising, retargeting, or cross-site tracking cookies.

Authentication and integration tokens for the monday.com embedded app are handled server-side and are not stored in browser cookies.

If a cookie notice is shown, the acknowledgement is stored locally only to remember that the notice was dismissed.

Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Our retention periods are as follows:

• Account data: retained for the duration of your account, and deleted within 90 days after account closure unless retention is required by law.
• Location data: retained for the period defined in your subscription plan settings, after which it is automatically purged.
• Support and communication records: retained for up to 3 years to support ongoing service delivery and dispute resolution.
• Financial and billing records: retained for up to 7 years as required by applicable tax and accounting regulations.
• Server and activity logs: retained for up to 12 months for security monitoring, fraud detection, and performance analysis.

When personal data is no longer required for any of the above purposes, it is securely deleted or anonymized. You may request early deletion of your data at any time by contacting us at support@hellotracks.com. We will fulfill deletion requests within 30 days, subject to any legal obligations requiring us to retain certain data. We will inform you if we are unable to fulfill a deletion request, and explain the reason.

Security

We use reasonable physical, electronic, and managerial safeguards to protect the personal data we collect. Access to personal data is limited to employees who require it to perform their duties.

In the event of a personal data breach, Hellotracks will investigate and notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you directly without undue delay in accordance with GDPR Article 34.

No method of transmission or electronic storage is 100% secure. We encourage you to use strong passwords, log out from shared devices, and keep your credentials confidential.

Protection for Children

Our Website and Service are not intended for children under 18 years of age. We do not knowingly collect personal data from children under 18. If we learn we have collected such data without verified parental consent, we will delete it promptly. If you believe we may have information from or about a child under 18, please contact us at support@hellotracks.com.

Your Privacy Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right to be informed: to know how we use your personal data.
• Right to access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data under certain conditions.
• Right to restrict processing: to request that we limit how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests.
• Rights related to automated decision-making and profiling.
• Right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, please contact us at hello@hellotracks.com. We will respond within one month. We may extend this by up to two additional months in complex cases and will notify you accordingly.

Additional Privacy Rights

Users may also have rights under applicable local laws, including the California Consumer Privacy Act (CCPA/CPRA), the Brazilian LGPD, the Virginia CDPA, and similar legislation. These rights may include the right to know, access, delete, and opt out of the sale of personal data. To exercise any applicable rights, please contact us at hello@hellotracks.com.

User Access to Data

You may request access to the personal data we hold about you by contacting us at support@hellotracks.com. We will provide a copy electronically unless you specify another format. We may verify your identity before fulfilling your request.

Data Correction and Deletion

If you believe data we hold is incorrect, please contact us to update it. Data no longer needed for the purposes described in this Policy will be deleted. Requests for correction or deletion may be sent to support@hellotracks.com.

Cookies and Similar Technologies

Cookies are small pieces of information placed on your device to facilitate and enhance your use of the Service. We and our third-party providers use cookies and similar technologies. You can manage cookie settings through your browser. Blocking all cookies may affect some Service functionality.

Opt-Out Process

You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any marketing email. To update personal data or opt out of specific uses, email us at support@hellotracks.com. We will process your request within a reasonable time.

Communications with Hellotracks

By providing contact information to us, you consent to receive communications from us through those channels. We may use your details to send requested information and, where consented, information about other products or services.

By using the Service, you consent to receive in-product communications including push notifications. You may manage notification preferences in your device settings. Carrier MESSAGE AND DATA RATES MAY APPLY for any SMS or voice communications.

No Rights of Third Parties

We may provide links to third-party services within our Service. We are not responsible for the privacy practices or content of those sites. When you leave our Service, you do so at your own risk. This Privacy Policy does not create rights enforceable by third parties.

Site Terms of Use

Use of this Service is governed by our Terms of Use at http://hellotracks.com/terms_hellotracks_business.html. This Privacy Policy is incorporated into those Terms.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We will post changes on this page and update the "Last Updated" date. For material changes to how we handle personal data, we will notify you by email or through a prominent notice on our Website at least 30 days before the change takes effect.

Governing Law

This Privacy Policy is subject to the laws of Delaware, United States, except to the extent that GDPR and applicable EU/EEA data protection laws impose additional or overriding obligations. You consent to the exclusive jurisdiction of the courts in Wilmington County, Delaware for disputes arising out of or relating to the Services, except where mandatory local law provides otherwise.

Contact Information

For questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact:

Hellotracks, LLC

Email: hello@hellotracks.com

Support: support@hellotracks.com

We are committed to addressing your inquiries promptly and in accordance with applicable data protection laws.