Privacy policy
Last updated: 2 August 2026
This policy explains what personal data TrackPacks collects, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR).
1. Data controller
The data controller is [to complete: name / company of the publisher], reachable at [contact email].
2. Data we collect
- Account: your email address and your password (stored only in encrypted form, never in plain text).
- Parcels: the information you enter or that is extracted from the emails you forward (item, carrier, tracking number, dates, sender).
- Forwarded emails: the content of the parcel emails you choose to send to the service, for the time needed to extract the tracking information.
- Technical data: IP address and connection logs, for security purposes.
TrackPacks never accesses your mailbox directly: only the messages you forward, through a filter you configure yourself, are processed.
3. Purposes and legal basis
- Providing the parcel-tracking service — legal basis: performance of the contract between us (the terms of use).
- Ensuring account security — legal basis: our legitimate interest in protecting the service.
4. Processors and recipients
To run the service, we rely on providers that process data on our behalf:
- Anthropic (Claude API) — analyses the content of forwarded emails to automatically extract parcel information. Data sent to the API is not used to train its models.
- Turso — database hosting.
- [to complete: site host] — application hosting.
We do not sell or rent your data to third parties.
5. Transfers outside the European Union
Some providers (including Anthropic) are located in the United States. These transfers are covered by the safeguards provided for by the GDPR (standard contractual clauses).
6. Retention period
- Account and parcel data: kept as long as your account is active.
- Content of forwarded emails: processed transiently for extraction, not kept beyond what is necessary.
- When you delete your account, your data is erased.
7. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. To exercise them, write to [contact email]. You may also lodge a complaint with your data protection authority (in France, the CNIL: cnil.fr).
8. Security
Passwords are encrypted, connections protected (HTTPS), sessions expire automatically and login attempts are rate-limited to prevent unauthorised access.
9. Cookies
TrackPacks uses only one strictly necessary cookie for sign-in. See the cookie policy.
This document is a starting template, aligned with how the service currently works. Fill in the fields in blue and have it reviewed by a professional before opening to paying customers.