📦 TrackPack Privacy Policy

Last Updated: December 26, 2025
Effective Date: December 26, 2025

Privacy at a Glance

What we collect: Shipping emails from Gmail, package tracking info

Why we collect it: To track your packages automatically

Who we share with: Secure AI processors (email analysis), carrier APIs (tracking updates)

We don't sell your data - Never have, never will

Introduction

TrackPack is a Chrome browser extension that helps you track packages by automatically scanning your Gmail inbox for shipping notifications. This Privacy Policy explains how we collect, use, store, and protect your information.

By using TrackPack, you agree to this Privacy Policy.

Information We Collect

1. Gmail Email Data

What we collect:

Email messages containing shipping/tracking keywords
Email metadata (sender, subject, date, message ID)
Email content only from shipping-related emails

How we collect it:

With your explicit permission via Gmail OAuth
Read-only access (we cannot send or modify emails)

2. Package Tracking Information

What we extract:

Tracking numbers
Carrier names (UPS, FedEx, USPS, DHL, etc.)
Retailer/sender names
Delivery dates and status

3. Technical Data

API usage logs
Error logs for debugging
Extension settings

How We Use Your Information

Package Tracking - Display and update package information
Email Processing - Scan Gmail for shipping notifications
Carrier Integration - Fetch real-time tracking from carrier APIs
Notifications - Alert you about deliveries
AI Processing - Extract tracking info using machine learning

Third-Party Services

Service Type	Purpose	Data Shared
Google Gmail API	Read shipping emails	OAuth token
AI Processing Services	Extract tracking info	Email content
Carrier Tracking APIs	Fetch delivery status	Tracking numbers

✓ We DO share: Email content with secure AI processors, tracking numbers with carrier APIs

✗ We DON'T share: Your email address, full inbox, non-shipping emails, or data with advertisers

Data Storage

Local Storage (Your Device)

Stored in Chrome's secure storage
Encrypted at rest
Deleted when you uninstall

Backend Storage (Our Servers)

Package tracking data
Email IDs (to prevent re-processing)
API keys and usage logs

Data Retention

Data Type	Retention Period
Active packages	Until delivered
Delivered packages	90 days
Archived packages	1 year
API keys	While active

Your Rights

You have the right to:

Access - View all your tracked packages
Delete - Uninstall extension or request data deletion
Export - Request a copy of your data
Opt-Out - Disable auto-sync or disconnect Gmail

Revoking Gmail Access

Go to myaccount.google.com/permissions
Find "TrackPack"
Click "Remove Access"

Security

We implement:

✓ HTTPS/TLS encryption
✓ API key authentication
✓ OAuth 2.0 for Gmail
✓ Regular security audits

GDPR & CCPA Compliance

EU Users (GDPR): You have additional rights including data portability, rectification, and the right to object.

California Users (CCPA): You have the right to know, delete, and opt-out of data sales. We do not sell your data.

Contact Us

Questions about privacy?

📧 Email: stevangrubac@lakeview-webdev.com

🌐 Website: trackpack.com

Response time: Within 5 business days

Changes to This Policy

We may update this Privacy Policy. Changes will be posted here with an updated "Last Updated" date. Material changes require your consent.