Privacy Policy

Last updated: 3 November 2026

1. Who we are

This Privacy Policy explains how personal data is handled when you visit trackleadsource.com, create an account or use app.trackleadsource.com. TrackLeadSource is operated by Augustinas Grupas, who is the controller of the personal data described in this policy.

In this policy, “Service” means the TrackLeadSource software and website, “account holder” means a person who registers an account, and “customer” means the business that uses the Service. Terms that are not defined here have the meaning given in our Terms and Conditions.

2. What this policy covers

This policy covers the personal data of account holders and of visitors to our own website and app.

It does not cover the visitors to our customers’ websites. Customers decide how tracking is used on their websites, and they are responsible for informing their visitors. TrackLeadSource does not receive, store or access the personal data of those visitors or the content of their forms. Section 6 explains the technical request that the Snippet makes.

3. Personal data we process

  • Account data: your name, email address, and your password in hashed form, or the profile details Google provides if you sign in with Google. We also hold a one-time code that we email you when you sign in or reset a password, in hashed form.
  • Sign-in and security data: sessions with the IP address and device information of the browser you signed in from, and cookies that keep you signed in.
  • Account and Website data: the Websites and domains you register, your site key, the role of people on your account, your plan, trial and subscription status, and the dates a registered Website was last seen using the Service.
  • Billing data: identifiers that link your account to our payment provider, the status and dates of your subscription, and the billing interval. Your card details are entered with our payment provider and are not stored by us.
  • Messages: the content of emails and requests you send us, and the service emails we send you, such as sign-in codes, password resets and billing notices.
  • Website usage data: information about how visitors use trackleadsource.com and the app, collected by the tools in section 5.
  • Technical data: IP address, browser, device and request information that our hosting and network providers process when you use the Service.

4. Why we use personal data

We use personal data to:

  • create and manage your account, authenticate you and keep it secure (contract and legitimate interests);
  • provide the Service, verify that a Website’s licence is active and apply plan limits (contract);
  • take payments, issue invoices and keep accounting records (contract and legal obligation);
  • send service emails about your account and subscription (contract and legitimate interests);
  • respond to questions and support requests (contract and legitimate interests);
  • understand how our website is used and improve it (legitimate interests, or consent where the law requires it);
  • prevent fraud and abuse and protect our systems (legitimate interests);
  • comply with the law and defend legal claims (legal obligation and legitimate interests).

We do not sell personal data.

5. Cookies and similar technologies

The app uses cookies to keep you signed in and to protect your session. These are needed for the Service to work.

Our marketing website uses Google Tag Manager, which loads other tags that we configure, and Plausible Analytics, which measures visits without cookies. These tools help us understand how the site is used. Tags loaded through Google Tag Manager can set cookies or similar identifiers in your browser.

You can block or delete cookies in your browser settings and use the opt-out tools offered by these providers. Blocking some cookies may affect how the site works.

6. Visitors to our customers’ websites

The Snippet runs in the browser of a visitor to a customer’s website. The information it records, such as the source, medium, campaign, pages visited and click IDs, is kept in the visitor’s browser and written into fields on the customer’s own forms. We do not receive or store it.

When a page that contains the Snippet loads, the visitor’s browser makes a technical request to our servers to check that the Website’s licence is active. The request identifies the Website’s hostname and site ID. Like any internet request, it carries standard technical information such as an IP address, which our hosting and network providers handle to deliver the Service. Our application does not store it, and we do not use it to identify or profile visitors.

If you are a visitor to a customer’s website and have questions about tracking or your data, please contact that customer.

7. Who we share data with

We use service providers to run the Service. They process personal data on our behalf or for their own purposes as their terms describe:

  • Cloudflare, for hosting, network delivery and the database that stores account data;
  • Stripe, for payments and subscription billing;
  • an email delivery provider, for sign-in codes, password resets and account emails;
  • Google, if you choose to sign in with your Google account;
  • the analytics tools listed in section 5, for the marketing website.

We may also disclose personal data where the law requires it, to protect our rights or security, or in a business transfer in which the Service is taken over by another person or company. We do not sell personal data.

8. International transfers

Our providers operate in several countries, including outside the European Economic Area. Where personal data is transferred outside the European Economic Area, we rely on the safeguards that apply to the transfer, such as an adequacy decision or standard contractual clauses, where the law requires them.

9. How long we keep data

We keep account data while your account is active and for as long as we need it to provide the Service, resolve disputes, enforce our terms and meet legal and accounting obligations. Billing records are kept for as long as accounting and tax rules require. When data is no longer needed, we delete or anonymize it. You can ask us to close your account and delete your data, subject to what we must keep by law.

10. Security

We use reasonable technical and organizational measures to protect personal data, including encrypted connections, hashed passwords and restricted access to our systems. No system is completely secure, and we cannot promise absolute security.

11. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and receive a copy;
  • correct inaccurate data;
  • ask us to delete your data;
  • restrict or object to our use of your data, including where we rely on legitimate interests;
  • receive your data in a portable format;
  • withdraw consent where we rely on it, without affecting use before you withdrew it.

To use these rights, contact us using the details below. We may need to confirm your identity first. You also have the right to complain to your local data protection authority. In Lithuania, this is the State Data Protection Inspectorate (VDAI).

12. Children

The Service is for businesses and is not directed at people under 18. We do not knowingly collect personal data from children.

14. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it last changed. Where a change is material, we will notify account holders by email or in the dashboard.

15. Contact

For questions about this policy or to use your rights, contact us using the contact details published on trackleadsource.com.

Know the story behind your next enquiry