1. Who we are
TRACKK is an HR and payroll platform operated by FBM Solutions Private Limited (“FBM Solutions”, “TRACKK”, “we”, “us”), a company registered in Pakistan with offices in Rawalpindi. This policy explains what personal data we handle through trackk.app, the TRACKK web application and mobile apps, and the HR tools published on this site (collectively, the “Services”).
Questions about this policy or about your data can go to info@trackk.app.
2. Two different roles we play
The distinction below decides who you should contact about a given record, so it matters more than anything else in this policy.
a. TRACKK as controller - our own website and business contacts
When you browse this website, request a demo, submit the contact form, subscribe to the blog newsletter, apply for a job or apply to the partner program, we decide why and how that data is used. We are the controller for it, and this policy governs it in full.
b. TRACKK as processor - employee data inside a customer’s account
When an employer subscribes to TRACKK and loads employee records, attendance, payroll, leave, performance, disciplinary or asset data into the platform, the employer is the controller and we are the processor. We handle that data only on the employer’s documented instructions, under the subscription agreement and data processing terms signed with them. We do not use it for our own purposes, and we never sell it.
If you are an employee of a TRACKK customer and want to access, correct or delete your record, please contact your own HR department first - they control that data. If they ask us to act, we will. We will also forward a request we receive directly to the relevant customer.
3. Data we collect as controller
Information you give us
- Contact and demo requests: name, work email, phone number, company name, company size, city and whatever you write in the message field.
- Newsletter subscriptions: email address and the page you subscribed from.
- Job applications: name, email, phone, the role applied for, and the CV or resume file you upload (PDF, DOC or DOCX, up to 5 MB).
- Partner program applications: contact details, company details and the partnership type you are applying for.
- Customer account data: for subscribers, the administrator contact details, billing information and support correspondence.
Information collected automatically
- Website analytics: we run our own first-party visitor analytics. It records IP address, approximate location derived from that IP (country, region, city), browser and operating system, device type, referring URL, the pages you view and how long you stay.
- Cookies and similar technologies: see our Cookie Policy for the full list, what each one does and how long it lasts.
- Server logs: standard request logs used for security, rate limiting and diagnosing faults.
Free tools on this website
The HR letter generator and salary slip generator are open tools. The employee names, salary figures and other details you type into them are used only to produce the document you asked for and are not stored in an account or used for marketing.
4. Why we use it
- To respond to your enquiry, arrange a demo and follow up on it.
- To provide, operate, support and improve the Services.
- To process subscriptions, invoicing and payments.
- To assess job and partner program applications.
- To send product and HR content you have asked to receive, which you can stop at any time.
- To understand which pages are useful and improve the website.
- To keep the Services secure, prevent abuse, and enforce rate limits.
- To meet legal, tax and regulatory obligations in Pakistan and other markets we serve.
We do not sell, rent or trade personal data, and we do not use customer employee data to train AI models.
5. Who we share it with
We share personal data only in these situations:
- Service providers who help us run the Services - hosting and infrastructure, email delivery, IP geolocation lookup for analytics, and payment processing. They act on our instructions and may not use the data for their own purposes.
- Our customer, where the data belongs to their TRACKK account.
- Authorities, where we are legally required to disclose, and only to the extent required.
- A successor, if the business or the relevant part of it is transferred; this policy or an equivalent would continue to apply.
A current list of infrastructure sub-processors is available to customers on request.
6. Where it is stored
TRACKK offers both a cloud deployment and a self-hosted deployment. On our cloud, data is held on managed servers we control. On a self-hosted deployment, employee data stays on the customer’s own infrastructure and we have no routine access to it. Some of our service providers may process limited data outside Pakistan; where they do, we require appropriate contractual safeguards.
7. How long we keep it
- Enquiries, demo and contact requests: up to 24 months after our last contact.
- Newsletter subscriptions: until you unsubscribe.
- Job applications and CVs: up to 12 months after the hiring decision, unless you ask us to delete them sooner.
- Website analytics: up to 26 months in identifiable form.
- Customer account and billing records: for the life of the subscription plus the period required by tax and accounting law.
- Employee data in a customer account: for as long as the customer’s agreement says. On termination we delete or return it in line with that agreement.
8. Your rights
Subject to applicable law, you can ask us to:
- Confirm what personal data we hold about you and give you a copy.
- Correct data that is wrong or incomplete.
- Delete data we no longer have a lawful reason to keep.
- Restrict or object to a particular use.
- Provide your data in a portable, machine-readable format.
- Withdraw marketing consent - every marketing email also carries an unsubscribe link.
Write to info@trackk.app. We respond within 30 days and may need to verify your identity first. Requests about data held inside an employer’s TRACKK account are routed to that employer, as explained in section 2.
9. Security
We encrypt data in transit, restrict access to the people who need it, rate-limit public endpoints, and log administrative activity. Our Security page sets out the controls in detail. To report a vulnerability, email security@trackk.app.
10. Children
The Services are for businesses and their staff. They are not directed at children, and we do not knowingly collect data from anyone under 16 outside an employment relationship. If you believe we have, contact us and we will delete it.
11. Third-party links
This site links to services we do not control, including our social profiles, WhatsApp, and the scheduling tool used to book demos. Their own privacy policies apply once you leave this site.
12. Changes to this policy
We may update this policy as the Services change or the law changes. The revised version is posted here with a new date at the top. If a change materially affects how we use your data, we will give subscribers reasonable notice before it takes effect.