Who we are
Tracklyne is a product analytics platform operated as a hosted service from Tunisia. For any question about data, write to slimbennasrallah@gmail.com.
Two kinds of data, two roles
- Account data (you, our customer): we are the data controller. This covers your name, email, workspace, members, plan and payments.
- Analytics data (your end users, collected by the SDK on your product): you are the controller and Tracklyne acts as your data processor. We process it only on your instructions, to provide the service to you.
A data processing agreement (DPA) is available on request for every plan.
What we collect
About you
- Account: name, email, hashed password, language and sign-in history.
- Workspace: projects, members and their roles, settings, insights, dashboards and notebooks you create.
- Subscription: your plan, its dates and the payments we recorded (amount and method). We never handle card numbers.
- Technical data: IP address and server logs, for security and diagnosis.
About your end users (through the SDK)
- Events and their properties that your code or autocapture sends: page and screen views, clicks, custom events.
- Device and context: browser, OS, screen size, referrer, UTM parameters, and an approximate location (country, city) derived from the IP address by Tracklyne.
- Identifiers: an anonymous random id, and the user id and person properties you choose to send with
identify. - When enabled by you: session recordings (with inputs masked by default), survey answers and error reports.
You decide what is collected. IP storage can be switched off, autocapture can be disabled, and you should not send sensitive data (health, passwords, payment details) as event properties.
Why we use it
To run the service (ingest, store, query and display analytics, replays, flags and surveys), manage your plan, keep the platform secure, prevent abuse and meet legal obligations. We do not sell data, show ads, build cross-customer profiles or train AI models on any data.
Where data is stored
In Tracklyne's managed infrastructure. Ingestion, storage, geolocation and session replays are processed by Tracklyne; we use no third-party analytics, storage or AI APIs. Data leaves our infrastructure only to the destinations you configure (webhooks, exports), to the email provider that sends our notifications, or when the law requires it.
Retention
Analytics data (events, persons, replays) is kept for your plan's retention window, then deleted automatically:
| Plan | Retention |
|---|---|
| Free | 90 days |
| Pro | 365 days |
| Scale | 730 days |
| Custom | As agreed in writing |
Account data is kept while your account is active. When you delete a project, a person or your workspace, the data is removed from our systems, apart from backups that expire on a rolling basis within 30 days.
Security
Connections are encrypted (HTTPS), passwords are hashed, access to production is restricted to the people who run the service, and every query is scoped to your workspace.
Your rights and your users' rights
You can access, correct, export or delete your data at any time from the app, or by writing to slimbennasrallah@gmail.com. Requests from your end users (access, deletion) should go to you as controller; you can delete or export a person from the app, and we help you answer within the legal deadlines. In Tunisia, personal data is protected by Law No. 2004-63; for users in the EU, Tracklyne supports your obligations under the GDPR.
Changes
We will notify workspace owners by email of any material change to this policy at least 15 days before it applies.