Tracost

Privacy Policy

Last updated: June 30, 2026

This Privacy Policy explains how Tracost collects, uses, shares, and protects information when you use our web, iOS, Android, and related backend services.

Who We Are

Tracost is a construction cost tracking and team operations application. It helps organizations manage project sites, budgets, expenses, credit debts, transfers, reports, team messages, user roles, and operational notifications.

Information We Collect

We collect information you or your organization provide when using Tracost, including:

Account and profile details such as name, email address, phone number, initials, role, and assigned sites.
Authentication details needed to sign you in through supported login methods.
Project and organization records such as organization names, site names, regions, customers, budgets, and balances.
Operational records such as transactions, expense categories, vendors, payment methods, quantities, receipts, transfers, credit debts, dates, times, and descriptions.
Team communications such as messages, thread identifiers, sender names, and timestamps.
Notification preferences and delivery logs for email and SMS alerts.
Technical information such as device, browser, session, and security data generated when you access the service.

Facebook Login Data

If you use Facebook Login or another Meta product to access Tracost, we may receive the information you authorize Facebook to share with us, such as your name, email address, profile picture, and Facebook user ID. We use this information only to create or access your Tracost account, verify your identity, and provide the service to you and your organization.

Tracost does not post to Facebook on your behalf and does not sell Facebook profile information.

How We Use Information

We use collected information to:

Provide, maintain, and secure Tracost.
Authenticate users and enforce organization roles and permissions.
Track project costs, budgets, transactions, debts, transfers, and reports.
Send account, invitation, budget, expense, debt, email, and SMS notifications when enabled.
Respond to support, privacy, security, and administrative requests.
Detect, prevent, and investigate misuse, fraud, unauthorized access, and service issues.
Comply with legal, accounting, tax, and regulatory obligations.

How We Share Information

We may share information in limited circumstances:

With authorized members of your organization according to their Tracost roles and permissions.
With service providers that help us host, authenticate, store, process, email, text, monitor, and operate Tracost.
With legal, regulatory, or law enforcement authorities when required by law or to protect rights, safety, and security.
As part of a business transfer such as a merger, acquisition, financing, reorganization, or sale of assets.

We do not sell personal information.

Data Storage and Security

Tracost uses technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. No internet or storage system is completely secure, so we cannot guarantee absolute security.

Data Retention

We keep information for as long as needed to provide Tracost, support your organization, maintain records, resolve disputes, enforce agreements, and meet legal or accounting requirements. Organization records may be retained by the organization administrator unless deletion is requested and legally permitted.

Your Choices and Rights

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete your personal information. You can update some information inside Tracost. For other requests, contact your organization administrator or use the contact details below.

You may also disable optional SMS or email alerts in your notification preferences where available.

Data Deletion Instructions

To request deletion of your Tracost account data, email us at contact@tracostapp.com with the subject line "Data Deletion Request" and include the email address connected to your Tracost account. We may need to verify your identity and coordinate with your organization administrator before deleting organization-owned records.

If you used Facebook Login, you can also remove Tracost from your Facebook account settings. After removal, send the deletion request above if you want us to delete data stored in Tracost systems.

Children's Privacy

Tracost is intended for business and organizational use. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

International Use

Your information may be processed in countries other than where you live. When we transfer information, we use safeguards appropriate to the service and applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date.

Contact Us

For privacy questions or requests, contact Tracost at contact@tracostapp.com.