Privacy Policy

Last updated: March 30, 2026

Introduction

At TravTrak, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our certification and credential management service. Please read this policy carefully.

By using TravTrak, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

Personal Information

We collect information that you provide directly to us, including:

  • Name and email address (for account creation)
  • Professional credentials and certifications (document type, number, state, issue and expiration dates)
  • Vaccination and immunization records (vaccine name, type, administration date, expiration date, administered by, notes)
  • License numbers and expiration dates
  • Employment and contract information
  • Agency contact details
  • Legal agreement records (timestamp and version of Terms of Service accepted at signup)
  • AI tool conversation content (contract details and contract preferences submitted to the Contract Rater or Contract Area Research Assistant — transmitted to Google's Gemini API)
  • Payment information (processed securely by Stripe)

Automatically Collected Information

When you use TravTrak, we automatically collect certain information:

  • Device information (browser type, operating system)
  • IP address and location data
  • Usage data (pages visited, features used, time spent)
  • Cookies and similar tracking technologies

Uploaded Documents

If you upload documents (certificates, licenses, etc.), we store these securely and use them only to provide our service to you. We do not share or sell your documents to third parties.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Send expiration reminders and notifications
  • Process payments and manage subscriptions
  • Respond to your questions and support requests
  • Send important updates about our service
  • Prevent fraud and enhance security
  • Analyze usage patterns to improve user experience
  • Comply with legal obligations

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: We work with trusted third-party service providers who help us operate our business:

  • Supabase: Database and authentication services
  • Vercel: Hosting and infrastructure
  • Stripe: Payment processing (they handle your payment info securely)
  • Resend: Email delivery for reminders and notifications
  • Google (Gemini API): Powers the AI Contract Rater and Contract Area Research Assistant tools (Premium only). When you use these tools, your conversation messages are sent to Google's Gemini API for processing. Google's Privacy Policy governs how Google handles this data.

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

Legal Requirements: We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

Business Transfers: If TravTrak is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

With Your Consent: We may share your information with your explicit consent for purposes not covered in this policy.

4. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption in transit (HTTPS/TLS) and at rest
  • Passwordless authentication via email-based magic links (one-time codes) — no passwords are stored
  • Regular security audits and updates
  • Access controls and monitoring
  • Secure database infrastructure with Supabase

Important: While we take reasonable precautions to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information to the best of our ability.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes.

You can request deletion of your data at any time by contacting support@travtrak.com.

6. Your Rights and Choices

Access and Update: You can access and update your personal information at any time through your account settings.

Delete Account: You can delete your account and all associated data from your account settings or by contacting support.

Email Notifications: You can control which email notifications you receive in your account settings. Note that you may still receive essential service emails (e.g., payment confirmations).

Data Portability: You can request a copy of your data in a portable format by contacting support@travtrak.com.

Cookies: You can control cookies and browser storage through your browser settings. See our for a full breakdown of every technology we use and how to opt out. Note that disabling strictly necessary cookies will prevent you from staying signed in.

7. Cookies and Tracking Technologies

We use cookies and similar browser technologies to keep you signed in, remember your preferences, and understand how TravTrak is used. We do not use advertising or cross-site tracking cookies.

For a complete list of every cookie and storage technology we use — including which are strictly necessary, which are functional, and how to control them — please read our dedicated .

8. Third-Party Links

TravTrak may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any information.

9. Children's Privacy

TravTrak is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete that information.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence. By using TravTrak, you consent to the transfer of your information to these jurisdictions.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect and how we use it
  • Right to delete your personal information
  • Right to opt-out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@travtrak.com.

12. AI-Powered Tools and Third-Party Processing

Premium subscribers have access to two AI-powered tools: the Contract Rater and the Contract Area Research Assistant. These tools involve third-party data processing that you should be aware of:

Data Transmitted to Google: When you submit a message to either AI tool, the content of your message and your conversation history for that session are sent to Google's Gemini API. This data is used solely to generate a response. TravTrak does not store your AI conversation history on our servers beyond the active browser session.

What May Be Included: Conversations may contain contract pay details, location information, housing budgets, and other employment-related information you choose to share. Do not include Social Security Numbers, bank account details, passwords, or other highly sensitive personal information in AI tool messages.

Google's Data Practices: Google processes AI tool messages under its own Privacy Policy and Terms of Service. We encourage you to review Google's Privacy Policy to understand how they handle API data.

No AI-Generated Professional Advice: AI responses are for informational purposes only and do not constitute financial, legal, employment, or housing advice. TravTrak is not responsible for decisions made based on AI-generated content.

13. Montana Privacy Rights

If you are a Montana resident, you have rights under the Montana Consumer Data Privacy Act (MCDPA), effective October 1, 2024:

  • Right to confirm whether we process your personal data and to access that data
  • Right to correct inaccuracies in your personal data
  • Right to delete personal data you have provided to us
  • Right to obtain a portable copy of your personal data in a format that allows you to transfer it
  • Right to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling (TravTrak does not engage in any of these activities)

To exercise any of these rights, contact us at support@travtrak.com. We will respond within 45 days of receiving your request. This period may be extended by an additional 45 days where reasonably necessary, and we will notify you of any such extension.

Appeals: If we decline to act on your request, we will inform you of the reason within the response period. You may appeal that decision by sending a written appeal to support@travtrak.com with the subject line "MCDPA Appeal." We will respond to your appeal within 60 days. If your appeal is denied, you may contact the Montana Attorney General to submit a complaint at dojmt.gov/consumer.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our website. Your continued use of TravTrak after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Company: TravTrak LLC

Address: 1001 S. Main St. STE 600, Kalispell, MT 59901

Email: support@travtrak.com

Website: https://travtrak.com

Response Time: We respond to privacy inquiries within 48 hours

By using TravTrak, you acknowledge that you have read and understood this Privacy Policy.