1. About This Policy

This Privacy Policy explains how we (“MRRTrack”, “we”, “our”) collect, share, and use your personal information when you use our website mrrtrack.com (the “Site”) or subscribe to our services as a customer or provider.

2. Personal Information We Collect and Why

The types of personal information we collect about you and the reasons we process them are as follows:

• Email address, electronic identification data (including when you sign up via Google or Outlook):
  • Why we collect it: To provide our services to our clients (including free trial users), manage access to our services, and enable sharing features.
  • Legal basis for processing: Contractual necessity.
• Identification data, electronic identification data, and internet connection usage data:
  • Why we collect it: To generate business and usage statistics related to our services.
  • Legal basis for processing: Our legitimate interest in understanding our service’s popularity to optimize visibility and user interface.
• Identification data, electronic identification data, and internet connection usage data:
  • Why we collect it: To provide personalized responses to your information requests via chatbot or direct contact.
  • Legal basis for processing: Our legitimate interest in responding to inquiries.
• Email address, identification data:
  • Why we collect it: To manage our relationship with clients and providers (including invoicing and payments).
  • Legal basis for processing: Contractual necessity.
• First and last name, email address:
  • Why we collect it: To send you marketing updates and messages about our services.
  • Legal basis for processing: Consent (unless a legal exception applies, in which case we rely on our legitimate interest to promote our services).
• Any information relevant or potentially relevant to litigation or legal proceedings involving us:
  • Why we collect it: For litigation and legal proceedings.
  • Legal basis for processing: Our legitimate interest in defending our rights and interests in court.

3. Sharing Personal Data by MRRTrack

We may share your personal information with the following categories of recipients:

• Our third-party service providers who process data on our behalf, including billing and payment services, customer support, website hosting, marketing and newsletters, and data analytics.
• Any competent law enforcement authority, regulatory agency, government agency, court, or third party when we believe disclosure is necessary: (i) to comply with applicable law or regulation, (ii) to assert, exercise or defend legal rights, or (iii) to protect your vital interests or those of another person.
• Our auditors, advisors, legal representatives, and similar agents in connection with advisory services they provide for legitimate business purposes, subject to contractual restrictions on using personal data for other purposes.
• A potential buyer (and its agents and advisors) in connection with any proposed purchase, merger, or acquisition of any part of our business, provided the buyer is informed to use your personal data only for the purposes disclosed in this Policy.
• Any other person with your prior consent to disclosure.

4. Protecting Your Privacy

We will process personal data in accordance with this Policy as follows:

• Fairness: We process personal data fairly, meaning we are transparent about how we process personal data and will comply with applicable law.
• Lawfulness: We process personal data only on lawful bases.
• Purpose limitation: We process personal data for specific, legitimate purposes and not in a way incompatible with those purposes, except as permitted by applicable data protection laws.
• Data minimization: We process personal data adequate, relevant, and limited to what is necessary for the purposes we process it.
• Data accuracy: We take reasonable steps to ensure personal data we hold is accurate, complete, and kept up to date. It is also your responsibility to keep your personal data accurate and inform us of any changes or errors (e.g., change of email address).
• Data security: We use appropriate technical and organizational measures to protect the personal data we collect and process. These measures are designed to provide security proportionate to the risks involved.
• Limited retention: We retain personal data only as long as necessary for the purposes we process it and do not keep data longer than required unless mandated by law.

5. Data Storage, Retention and Deletion

We retain personal data collected from you while we have a legitimate business need to do so (for example, to provide the services you requested or to comply with applicable legal, tax, or accounting obligations). Client data is retained for up to 2 years following the end of our contractual relationship. However, accounting-related personal data is retained for up to 10 years.

When we no longer need to process your personal data for legitimate business needs, we delete or anonymize it. If that is not possible (e.g., because your data is stored in backup archives), we securely store and isolate your personal data from further processing until deletion is possible.

6. International Data Transfers

Your personal data may be transferred to and processed in countries other than the one where you reside. These countries may have different data protection laws and may not offer the same level of protection.

Specifically, our servers are located in France, and our third-party service providers operate within the EU and the United States. This means your personal data may be processed in one of these countries.

However, we have taken appropriate measures to ensure your data remains protected under this Policy. This includes implementing the European Commission’s standard contractual clauses for data transfers with our third-party service providers and partners. Further details are available upon request.

7. Your Data Protection Rights

You have the following data protection rights:

• You may request access to, correction, updating, or deletion of your personal data at any time by contacting us at [email protected].
• In certain circumstances under applicable data protection laws, you may object to processing, request restriction of processing, or request portability of your personal data. You may exercise these rights by contacting us at the email above.
• If we have processed your personal data based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of prior processing or processing based on other legal grounds.
• You may unsubscribe from marketing communications at any time by clicking the "unsubscribe" or "opt-out" link in the emails we send.
• If you have concerns or complaints about how we process your data, we will try to address them. If unresolved, you have the right to lodge a complaint with your local data protection authority.

8. Links to Other Websites

The Site may contain hyperlinks to websites operated by third parties. These websites have their own privacy policies, which we encourage you to review. They govern how personal data is handled when you visit those sites.

We assume no responsibility or liability for the privacy practices of third-party websites. Your use of such sites is at your own risk.

Last updated: 06-18-2025