This Privacy Policy describes how DemandTrack ("we", "us", "our") collects, uses, and protects personal information when you use our platform at app.demandtrack.online or demandtrack.io ("Service").
Account information: When your organisation's Admin creates a user account, we collect your full name and email address. These are used for authentication and identification within the platform.
Usage data: We log user actions within the platform — stage transitions, field updates, demand creation, and closures — as part of the immutable audit trail. This data is organisational in nature and stored in your tenant's isolated database partition.
Uploaded files: Files attached to demands (PDFs, documents, images) are stored in a private Supabase Storage bucket and are never publicly accessible. Downloads are served via short-lived signed URLs.
Technical data: We may collect basic technical information such as browser type and session identifiers for security and debugging purposes. We do not use persistent third-party tracking cookies.
We do not use your data to train AI models. We do not sell your data to third parties. We do not use your data for advertising.
Your data is stored in Supabase (PostgreSQL) with Row Level Security (RLS) policies enforced at the database level. Every table includes a tenant identifier, ensuring that your organisation's data is strictly isolated from other tenants.
Files are stored in a private Supabase Storage bucket. Signed URLs used for file downloads expire after 60 seconds.
Authentication is handled by Supabase Auth with email/password login. Sessions expire after 24 hours of inactivity.
Our infrastructure is hosted on Vercel and Supabase, both of which maintain their own security and compliance certifications. We recommend reviewing their respective privacy policies for infrastructure-level details.
We retain your data for the duration of your subscription. Upon cancellation or termination, we retain your data for 30 days during which you may request an export. After 30 days, all tenant data — including user records, demands, audit logs, and uploaded files — is permanently deleted.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at contact@demandtrack.online. We will respond within 30 days.
DemandTrack uses the following third-party infrastructure providers:
We do not integrate with advertising networks, analytics platforms (such as Google Analytics), or social media trackers. No third-party tracking code runs on the platform.
DemandTrack uses session cookies for authentication purposes only. We do not use advertising cookies, tracking pixels, or persistent third-party cookies. The "Remember Me" option at login sets a session token that expires after 90 days.
The Service is intended for professional business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.
DemandTrack is operated from Dubai, UAE. Your data may be processed on servers located outside your country. By using the Service, you consent to such transfers. We take reasonable measures to ensure that transferred data is protected in accordance with this policy.
We may update this Privacy Policy periodically. We will notify registered users of material changes by email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.
For privacy-related enquiries, contact us at contact@demandtrack.online. We aim to respond to all requests within 30 days.