Privacy policy

What GreenTrack collects about you, what it does with it, and what you can ask us to do.

Last updated 15 Oct 2026

What this covers

This policy covers the GreenTrack application and this website, run by GreenTrack (“we”). It applies to everyone with an account and to visitors of this site. A firm that sets up a workspace decides what goes into its projects; for that content the firm is the controller and we process it on the firm’s behalf.

What we collect

Your account. Your name, email address and, if you sign in with Google or Microsoft, the profile picture they provide. Which workspaces you belong to and your role in each. Your preferences (theme, layout, preferred rating system), saved on your account.

Project content. Whatever your workspace puts into its projects: project and building names, stage dates, deliverables and their statuses, comments, evidence files, feasibility judgements and their reasons, rating libraries and manuals. Much of this names people: who leads a deliverable, who commented, who approved.

Activity. Every change on a project is logged with the person and the time, because a certification needs that record.

Technical. Server logs with your address, browser and the time of each request, kept to run and secure the service. There are no analytics, advertising or tracking services on GreenTrack.

Why we use it

To run the service you signed up for: showing you your projects, telling colleagues who did what, sending the emails that sign you in and invite you.
To keep the service secure and working, including finding and fixing problems.
To meet legal obligations, and to establish or defend legal claims.
With your consent, where the law asks for it, which you can withdraw at any time.

We do not use your data for advertising, we do not sell it, and we do not use it to train AI models.

Providers we rely on

These providers process data on our instructions and under contracts that bind them to protect it. Some of them are outside the UAE, so your data is transferred to the countries listed.

Provider	What for	What they hold	Where
Clerk	Accounts, sign-in, workspaces and invitation emails	Name, email, profile picture, workspace memberships, session	United States
Supabase	Database and file storage	Projects, deliverables, comments, evidence files, libraries and manuals	India (Mumbai region), encrypted in transit and at rest
Vercel	Hosting the application and running its scheduled jobs	Request logs (address, browser, time, page)	United States and edge locations
OpenAI	AI features, once they launch: reading and explaining your project's content on request	Only the content needed for that request; not used to train models under OpenAI's API terms	United States

How long we keep it

Project content stays as long as the project exists. Deliverables, evidence and comments are never deleted from a live project; they are deactivated or kept in history, because the audit trail is the point.
A workspace admin can ask us to delete a project or the whole workspace. We delete it from the live database promptly and from backups as they expire.
Your account stays until you ask us to close it. Closing it removes your name from new activity; the record of what you did on projects stays, attributed to a former member.
Uploaded manuals nobody attached to a library are removed by a daily job.
Server logs are kept for a short period by the hosting provider and then discarded.

What you can ask for

You can ask to see the personal data we hold about you, to correct it, to receive a copy of it, to have it deleted, or to object to how we use it. Most of your account data you can change yourself under Settings. For anything else, write to us and we will answer within a month. If you are in a country with a data protection authority, you can also complain to it.

Write to hello@greentrack.app.

Cookies and local storage

A session cookie set by Clerk keeps you signed in. It is essential; there is no banner because there is nothing to opt out of.
A cookie remembers whether the sidebar is open.
Local storage holds the theme applied in this browser (light, dark or system) and the id of the account it belongs to, so a shared computer shows each person their own choice.

No third-party cookies are set.

Changes and contact

When this policy changes in a way that matters, we tell workspace admins by email before it takes effect and show the new date at the top. GreenTrack is not for anyone under 18.