Privacy Policy

Tracy Made LLC (“Company,” “we,” “us,” or “our”) operates Bare Bones CRM (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: name, email address, password, and billing information provided during registration.
• Customer Data: business records you input into the Service, including your customers’ company names, addresses, contacts, notes, quotes, tasks, leads, and related business information.
• Personal Detail Fields: if you choose to use them, optional fields for recording personal/relationship details about your business contacts (such as birthdays, family information, personal preferences, or similar notes). You are responsible for ensuring you have appropriate rights and consent to store this information about third parties.
• Communications: information you provide when contacting us for support.

1.2 Information Collected Automatically

• Usage Data: pages visited, features used, and actions taken within the Service.
• Device and Log Data: IP address, browser type, operating system, and access timestamps.
• Cookies and Similar Technologies: used to maintain sessions, remember preferences, and understand usage patterns.

1.3 Information from Third Parties

• Payment Information: processed by our payment processor, Stripe, Inc. We do not directly store your full payment card details; Stripe handles this in accordance with its own privacy policy and PCI-DSS compliance standards.

2. How We Use Information

We use collected information to:

• ( a) provide, operate, and maintain the Service;
• ( b) process subscription payments and manage billing;
• ( c) communicate with you about your account, updates, and support requests;
• ( d) send trial-ending, billing, and task/follow-up reminder notifications you have configured;
• ( e) monitor and analyze usage to improve the Service;
• ( f) detect, investigate, and prevent fraudulent or unauthorized activity;
• ( g) comply with legal obligations.

We do not sell your personal information or your Customer Data to third parties.

3. How We Share Information

We share information only in the following circumstances:

3.1. Service Providers. We share information with third-party vendors who perform services on our behalf, including:

• Stripe, Inc. — payment processing and subscription billing.
• Base44 (and its underlying infrastructure providers) — application hosting, database storage, and infrastructure services.
• Email delivery providers used to send transactional and reminder emails.

These providers are contractually obligated to use your information only as necessary to provide their services to us.

3.2. Legal Requirements. We may disclose information if required to do so by law, subpoena, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3. Business Transfers. If Tracy Made LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

3.4. With Your Consent. We may share information for other purposes with your explicit consent.

4. Data Retention

4.1. We retain your account information and Customer Data for as long as your account is active.

4.2. Following account cancellation or termination, we retain Customer Data for thirty (30) days to permit export or reactivation, after which it may be permanently deleted from our active systems, subject to residual copies retained in routine backups for a limited additional period.

4.3. We may retain certain information longer where required for legal, tax, or accounting purposes.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information, including encrypted data transmission, access controls, and optional two-factor authentication for your account. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

6.1. Access and Correction. You may access and update most of your account and Customer Data directly within the Service.

6.2. Data Export. You may request an export of your Customer Data at any time by contacting us, or before your account is deleted following cancellation.

6.3. Deletion. You may request deletion of your account and associated data, subject to the retention provisions in Section 4.

6.4. Marketing Communications. You may opt out of non-essential marketing emails by following the unsubscribe instructions included in such emails. You cannot opt out of essential transactional communications (e.g., billing notices) while your account remains active.

6.5. California Residents (CCPA). If you are a California resident, you may have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information as defined by the CCPA. To exercise these rights, contact us using the information in Section 10.

6.6. European Residents (GDPR). If you are located in the European Economic Area or United Kingdom, you may have additional rights, including the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. Our legal basis for processing is generally the performance of our contract with you (providing the Service) and our legitimate business interests. To exercise these rights, contact us using the information in Section 10.

7. Third-Party Contact Data

The Service allows you to store personal information about your own business contacts, including sensitive relationship-building details. We act as a data processor with respect to this information — you (the account holder) are the data controller responsible for ensuring you have lawful grounds to collect and store such information about third parties, and for responding to any data subject requests from those individuals.

8. Children’s Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email. Your continued use of the Service after such changes constitutes acceptance of the revised policy.

10. Contact Us

For questions about this Privacy Policy or to exercise any of the rights described above, contact: