Plain English summary: This agreement explains how ProfitTrackStar processes data on your behalf as a business tool. We store your business data securely, don't sell it, don't share it with advertisers, and give you full control to export or delete it at any time. This DPA is provided for users who require it for GDPR, CCPA, or other data compliance purposes.
This Data Processing Agreement ("DPA") is entered into between ProfitTrackStar ("Data Processor," "we," "us") and you, the user of ProfitTrackStar ("Data Controller," "you"). This DPA forms part of our Privacy Policy and Terms of Service.
ProfitTrackStar is a business management tool for craft sellers. As part of providing this service, we process business data you enter into the application, including product information, order records, customer details, and financial data.
When you use ProfitTrackStar with an account (Starter or Pro plans), we store and process the following data you provide:
We process this data solely to provide the ProfitTrackStar service to you. We do not use your business data for any other purpose.
We also process limited data about you as the account holder:
ProfitTrackStar commits to the following:
We implement the following security measures to protect your data:
We use the following sub-processors to deliver ProfitTrackStar. Each is contractually bound to protect your data:
| Sub-processor | Purpose | Location | Privacy Policy |
|---|---|---|---|
| Supabase | Database, authentication, and backend infrastructure | USA (AWS) | supabase.com/privacy |
| Stripe | Payment processing and subscription billing | USA | stripe.com/privacy |
| Resend | Transactional email delivery | USA | resend.com/legal/privacy-policy |
| PostHog | Anonymous usage analytics (consent-based) | USA | posthog.com/privacy |
| Cloudflare | Website hosting, CDN, and DDoS protection | USA (global CDN) | cloudflare.com/privacypolicy |
We will notify you of any material changes to our sub-processors by updating this page and, where appropriate, by email.
As a Data Controller, you are responsible for honoring the rights of your customers whose data you store in ProfitTrackStar. We will assist you in this process. Your customers may have the right to:
To fulfill these requests, you can use ProfitTrackStar's built-in data export and deletion features, or contact us at contact us for assistance.
ProfitTrackStar is operated from the United States. Your data is stored on servers in the United States (AWS via Supabase). If you are located in the European Economic Area (EEA) or United Kingdom, your data may be transferred to and processed in the United States. We rely on our sub-processors' data transfer mechanisms (including Standard Contractual Clauses where applicable) to ensure adequate protection.
We retain your business data for as long as you maintain an active ProfitTrackStar account. Upon account deletion or termination:
You can export all your data at any time using the built-in Export Backup feature (Import/Export tab). To request immediate deletion of your account and all associated data, contact us via our contact page.
In the event of a Personal Data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify you without undue delay — and in any event within 72 hours of becoming aware of the breach. Our notification will include the nature of the breach, categories of data affected, likely consequences, and measures taken or proposed.
You have the right to request information demonstrating our compliance with this DPA. We will provide relevant documentation upon written request via our contact page. We may charge a reasonable fee for audits that require significant time or resources.
This DPA is governed by the laws of the State of Indiana, United States, consistent with our Terms of Service. For users in the European Economic Area, this DPA is also intended to satisfy the requirements of Article 28 of the GDPR.
For any questions about this DPA, data deletion requests, or assistance with Data Subject rights, contact us: