Security

Tracks IT Consultancies LLC · last updated November 13, 2026

1. In short

We describe what we actually do. Tracks IT Consultancies LLC does not hold security certifications or audit reports, and we do not claim any. If you need a security questionnaire for your own company, write to hello@tracksitpdf.com.

2. Your data is kept apart

Every business can only read its own invoices, clients, files and settings. This is enforced inside the database itself, not only in the app, so a mistake in a screen cannot show you someone else’s data. Pages your clients open use a long private link and show only that one document.

3. Encryption

Everything between your device and our servers travels over encrypted connections (HTTPS). Data in our database and file storage is encrypted at rest by our hosting provider. Secret keys are kept only on our servers and are never placed in the app or the website.

4. Files you upload

PDF-tool files are deleted automatically within 24 hours, and uploads waiting to be converted within about an hour. Links to download them last 15 minutes. Bill photos and templates read by the AI are not stored. Invoices, estimates, clients and logos stay until you delete them or close your account.

5. Payments

Card and bank details are entered on pages run by Stripe. We never see or store full card numbers.

6. Signing in

You can sign in with a one-time code sent to your email, with a password, or with Google or Microsoft where offered. We limit how fast anyone can try, and we keep a record of recent sign-in places and devices so you and we can spot something unusual. You can sign out your other devices in Settings › Profile.

7. Our own access

Our admin tools are limited to authorised people, are checked on our servers (not just hidden on screen), and every use is logged. We look at your content only when you ask us for help or when needed to fix a fault or prevent abuse.

8. Backups and mistakes

Our database is backed up daily by our provider, and backups roll over within a short time. We watch for failed payments, failed emails and errors, and we are alerted when something breaks.

9. If something goes wrong

If a breach affects your data, we tell you without undue delay, say what happened and what to do, and tell the authorities where the law requires it (for example within 72 hours under European law). We keep a record of every incident.

10. Reporting a weakness

If you find a security problem, please tell us at hello@tracksitpdf.com with “Security” in the subject, and give us reasonable time to fix it before sharing it. If you act in good faith, do not access other people’s data beyond what is needed to show the problem, and do not disrupt the service, we will not take legal action against you. The full terms are in our Terms of service.