Privacy Policy

Introduction

InstaTrac, Inc. ("InstaTrac," "we," "us," or "our") operates the MobileTrac mobile application and the mobiletrac.ai website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Service.

By using MobileTrac, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

Information We Collect

Account Information: When you log in, we collect:

• Name
• Email address
• Password (stored only in hashed form)

Profile Information: You may optionally provide:

• Job title
• Mailing address
• Cell phone number
• Office phone number

Usage Data: We collect data related to how you use the Service, including:

• Tracking lists you create (list names, descriptions, and which bills you add)
• Email notification preferences you set
• Login count and last login timestamp

Information We Do Not Collect: MobileTrac does not collect device identifiers, precise location data, contacts, photos, browsing history, or any data from other apps on your device. We do not use third-party analytics or advertising SDKs.

How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service, including your personalized dashboard and tracking lists
• Authenticate your identity and secure your account
• Send email notifications you have opted into (daily alerts, action alerts, testimony alerts, floor debate alerts, bill text updates, and special reports)
• Respond to your customer service requests
• Monitor login activity to detect unauthorized access to your account

Legal Basis for Processing

We process your personal information based on:

• Contract performance: Processing necessary to provide you the Service under your subscription agreement
• Consent: Email notifications are sent only based on the preferences you choose
• Legitimate interest: Login monitoring to protect account security

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers: We use Amazon Web Services (AWS) for hosting infrastructure. These providers are contractually obligated to protect your data and use it only as directed by us.
• App delivery: The app is distributed through Apple App Store and Google Play Store, which have their own privacy policies governing the download process.
• Over-the-air updates: We use Expo's update service to deliver app updates. This service receives only the information necessary to deliver updates to your device.
• Legal compliance: We may disclose your information if required by law, court order, or governmental authority.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. If your account is deactivated, we retain your data in a deactivated state and do not use it for any purpose other than compliance with legal obligations.

Authentication tokens stored on your device expire after 7 days and are removed when you log out.

If you wish to have your data deleted, please contact us using the information in the "Contact Us" section below.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Passwords are hashed using bcrypt and are never stored or transmitted in plain text
• Authentication uses JSON Web Tokens (JWT) transmitted over HTTPS
• All API communications are encrypted in transit
• Input sanitization is applied to prevent cross-site scripting and injection attacks

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information via the Account screen in the app or by contacting us
• Deletion: Request deletion of your personal information
• Data portability: Request a machine-readable copy of your data
• Withdraw consent: Opt out of email notifications at any time through the app's Account settings

To exercise any of these rights, please contact us at custserv@instatrac.com. We will respond to your request within 30 days.

Children's Privacy

MobileTrac is designed for professional use and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at custserv@instatrac.com.

Third-Party Links

The Service may contain links to external websites, such as the Massachusetts Legislature website (malegislature.gov) and other government resources. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

InstaTrac, Inc.
50 Milk Street
Boston, MA 02109
Email: custserv@instatrac.com
Phone: 617-292-1800