RootTracking

Legal

Privacy Policy

Last updated: August 7, 2026

RootTracking ("we", "us", or "our") operates the platform available at app.roottracking.com and roottracking.com. This Privacy Policy describes how we collect, use, and protect your information when you use our services.

1. Information We Collect

We collect information you provide directly to us, such as:

  • Account registration details (name, email address, password)
  • Billing information (processed securely by Stripe — we do not store card data)
  • Campaign and advertising data imported from connected ad accounts
  • Postback and conversion events received from affiliate networks
  • Google OAuth tokens when you connect a Google Ads account

We also collect usage data automatically, including IP addresses, browser type, and pages visited, for security and analytics purposes.

2. How We Use Your Information

  • To provide and operate the RootTracking platform
  • To import and display your campaign performance data from Google Ads
  • To upload offline conversion events to your Google Ads account on your behalf
  • To send you notifications (Telegram, browser push) that you configure
  • To process billing and manage your subscription
  • To improve platform features and fix issues

3. Google Ads Data

When you connect a Google account, RootTracking accesses your Google Ads data solely to display campaign metrics to you and to upload conversion events on your behalf. We do not share your Google Ads data with any third party. You can disconnect your Google account at any time from the Integrations screen, which revokes our access.

RootTracking's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Storage and Security

Your data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure. We use row-level security to ensure each user can only access their own data. OAuth tokens are stored server-side and never exposed to the browser. We use HTTPS for all data in transit.

5. Data Sharing

We do not sell or rent your personal data. We share data only with:

  • Supabase — database hosting
  • Stripe — payment processing
  • Vercel — platform hosting
  • Google — for OAuth authentication and Ads API operations you initiate

6. Data Retention

We retain your data for as long as your account is active. If you cancel your account, you may request deletion of your data by contacting us at suporte@roottracking.com.

7. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at suporte@roottracking.com.

8. Cookies

RootTracking uses essential cookies for authentication and session management. We do not use third-party tracking cookies for advertising purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page.

10. Contact

If you have any questions about this Privacy Policy, contact us at:
suporte@roottracking.com