Privacy Policy

Timber Apps, LLC, doing business as TRACT (“TRACT,” “we,” “us,” or “our”), provides this Privacy Policy to explain how we collect, use, disclose, and protect personal information when you visit gettract.com (the “Site”), use our web applications at app.gettract.com and inv.gettract.com, our mobile applications (collectively, the “Apps”), and related services (together with the Site and Apps, the “Services”). By using the Services, you (“User” or “you”) consent to the practices described in this policy. If you do not agree, do not access or use the Services.

This policy was last reviewed and updated in March 2026. We encourage you to review it periodically.

Collection of Personal Information

TRACT may collect the following categories of information through the Services:

Account & Identity Information: Email address, first and last name, business name, country or region, state or territory, ZIP or postal code, phone number, and job title.

Transaction & Usage Information: Data pertaining to your online transactions, purchase and sale history, Services usage patterns, timber load pricing, volumes, locations, mill data, settlement records, and other forestry operational data entered into the Services (“Transaction Information”).

Device & Technical Information: Internet Protocol (IP) address, device identifiers (including mobile device IDs), browser type and version, operating system, app version, crash reports, and performance data.

Location Information: GPS coordinates and geolocation data collected through our mobile Apps when you use features such as load tracking, geostamping, or geofencing. You may disable location services through your device settings, but some App features may not function properly.

Camera & Photo Data: Images captured through our Apps for ticket scanning, load documentation, or other Service features. Images are processed for data extraction and stored as part of your Transaction Information.

Communications: Records of your communications with TRACT, including support requests, feedback, and correspondence.

Data Ownership & Licensing

You retain all ownership rights to the data you create, upload, or input through the Services (“Customer Data”). By using the Services, you grant TRACT a limited, non-exclusive, worldwide license to use, process, store, and transmit Customer Data solely for the purposes of (a) providing, maintaining, and improving the Services; (b) providing customer support; and (c) generating aggregated, de-identified analytics that do not identify you or any individual. This license terminates when you delete your Customer Data or your account is terminated, except as required for backup, legal compliance, or as otherwise described in this policy.

Use of Personal Information

TRACT will not sell, rent, or share your personal information with others without your consent, except as described in this policy. We use your information for the following purposes:

Deliver the products and services that you have requested;
Manage your account and provide you with customer support;
Perform research and analysis about your use of or interest in our products, services, and content;
Communicate with you by email, push notifications, or other channels about products or services that may be of interest to you;
Communicate with you with regard to partially completed service requests;
Perform anonymous, secure and private aggregation of timber prices;
Enforce our Terms of Use and other conditions of use of our Services;
Manage our business;
Process data through automated systems, including AI and machine learning tools, for features such as document scanning, data extraction, and reconciliation (see “AI & Automated Processing” section below); and
Perform functions as otherwise described to you at the time of collection.

Disclosure of Personal Information

TRACT may share personal information with the following categories of third-party service providers, each of which is contractually obligated to use information only for the purposes for which it was disclosed:

Cloud infrastructure and hosting providers
Database management providers
Application monitoring and analytics providers
AI and machine learning service providers (see “AI & Automated Processing” below)
Email and communications service providers
Customer support tools and service providers

For a current list of our infrastructure and service providers, please visit our Data Security page. Each service provider receives only the information necessary to perform its designated function and is prohibited from using it for any other purpose.

TRACT may disclose personal information if required to do so by law or in the good-faith belief that such action is necessary to: (a) conform to legal requirements or comply with legal process served on Timber Apps, LLC; (b) protect and defend the rights or property of Timber Apps, LLC; or (c) act under exigent circumstances to protect the personal safety of Users or the public.

In the event of a merger, acquisition, reorganization, bankruptcy, or other change of ownership or control, TRACT will provide notice to affected Users before personal information is transferred to a new entity. Any acquiring entity will be required to honor the commitments made in this Privacy Policy, or provide Users with notice and an opportunity to opt out before applying a materially different privacy policy to their information.

Managing Personal Information

Users can always add, update, or remove information in their user profile. In addition, Users can change their preferences for contact with TRACT.

To request access to, correction of, or deletion of your personal information, or to exercise any other privacy rights described in this policy, please contact us at help@gettract.com.

Public Information

Any information that Users reveal in their user profile, in communication with any other Users, or in other online discussions or forums (“Profile Information”), is intentionally open to the public and is not in any way private. Think carefully before publicly disclosing any personally identifiable information. Profile Information may be seen and/or collected by third parties and may be used by others in ways we are unable to control or predict.

Security and Storage of Your Personal Information

TRACT employs industry-standard security measures to protect your information, including:

AES 256-bit encryption for data at rest and SSL/TLS encryption for data in transit;
Application servers isolated from direct Internet access;
Infrastructure hosted on SOC 2 compliant cloud and database providers;
Role-based access controls with multi-factor authentication;
Continuous application monitoring and automated threat detection;
Daily automated database backups with point-in-time recovery;
Regular security assessments and penetration testing.

For more details about our security practices, visit our Data Security page. Despite our efforts, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Data Retention

TRACT retains your personal information for as long as your account is active or as needed to provide the Services. Specific retention periods by data category:

Account Information: Retained for the duration of your account plus 90 days after termination to allow for reactivation or data export.
Transaction Information: Retained for the duration of your account plus any period required by applicable tax, financial, or regulatory record-keeping requirements.
Application Logs: 7 days searchable, 365 days archived.
Support Communications: Retained for 3 years after resolution.
Aggregated/De-identified Data: May be retained indefinitely as it cannot be linked to an individual.

Upon account termination, you may request deletion of your Customer Data. We will process deletion requests within 30 days, subject to any legal retention obligations.

Operational Information

Some operational information (“Operational Information”) is used by the Services in order to operate accounts properly and provide the services requested. This Operational Information does not include personally identifiable information, but may include the date on which a profile was last updated, whether an email address has been verified, whether an account has been deactivated, a specific browser used, and an IP address of a computer or networking device. Operational Information may be shared with third parties to the extent necessary to provide the Services.

Aggregate Information

We may collect and analyze information about Users of the Services in the aggregate (“Aggregate Information”), for example: overall usage patterns of Users, total number of Users, or regional usage trends. The collection and analysis of Aggregate Information is important in the operation and enhancement of the Services and other business purposes. Aggregate Information may be compiled in reports and disclosed, shared, or licensed to third parties. However, since Aggregate Information does not include any information that can be used to individually identify a User, the third party recipient of the Aggregate Information cannot use it to contact a User.

Aggregated timber pricing data may be shared with industry data providers for informational and market research purposes. This data is aggregated using statistical methods that prevent identification of any individual User, operation, or transaction. Specifically: (a) pricing data is combined across multiple Users and regions before sharing; (b) no individual load, transaction, or User-level data is ever disclosed; and (c) recipients are contractually prohibited from attempting to re-identify individual Users. You may opt out of having your data included in aggregated timber pricing reports by contacting us at help@gettract.com.

AI & Automated Processing

TRACT uses artificial intelligence and machine learning technologies to provide certain Service features, including automated scanning and data extraction from mill scale tickets, reconciliation documents, and other records (“AI Features”). The following applies to AI Features:

Data Processing: Documents and data submitted through AI Features may be processed by third-party AI service providers acting as sub-processors under contractual obligations to protect your data.
Model Training: Customer Data is not shared with third-party AI providers for the purpose of training their general-purpose models. TRACT may use AI tools internally to develop and improve Service features, but individual Customer Data is not used to train models accessible to other customers or third parties.
Data Residency: AI processing occurs on servers located in the United States.
Human Review: AI-generated outputs are presented to you for review and correction. TRACT does not make automated decisions that produce legal or similarly significant effects on Users without human involvement.

Mobile Applications

Our mobile Apps (TRACT Loader & Dispatch for iOS and Android, TRACT Inventory for iOS) may collect additional information beyond what is collected through the Site, including:

Device Information: Device model, operating system version, unique device identifiers, and mobile network information.
Location Data: Precise GPS location when using load tracking, geostamping, geofencing, or mapping features. Location collection occurs only while the App is in use for these features, unless you enable background location for continuous tracking.
Camera Access: The Apps request camera permission for ticket scanning and load photo documentation. Images are uploaded to the Services for processing and storage.
Push Notifications: We may send push notifications related to load status, settlement updates, or other Service communications. You can disable push notifications in your device settings.
Analytics: We use anonymized usage analytics and crash reports to improve App performance.

You can manage App permissions (location, camera, notifications) through your device’s operating system settings.

Cookies & Tracking Technologies

TRACT and our service providers use cookies and similar tracking technologies (including pixels, web beacons, and local storage) on the Site and in the Services. We categorize these as follows:

Strictly Necessary: Required for the Site and Services to function (e.g., session cookies for authentication). These cannot be disabled.
Functional: Remember your preferences and settings to enhance your experience.
Analytics: Help us understand how Users interact with the Site and Services so we can improve them.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect your ability to use the Services. For EU/EEA visitors, we obtain consent before placing non-essential cookies.

Third-Party Websites

Third party websites and services accessible through the Site have separate privacy and data collection practices, independent of TRACT. TRACT has no responsibility or liability for these independent policies or actions. If Users provide any information to such third parties, different rules regarding the collection and use of personal information may apply. We strongly suggest that Users review such third parties’ privacy policies before providing any data to them.

Children’s Privacy

The Services are designed for business use and are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will promptly delete it. If you believe a child under 16 has provided personal information to TRACT, please contact us at help@gettract.com.

Your Privacy Rights

California Residents (CCPA/CPRA): If you are a California resident, you have the right to:

Know what personal information we collect, use, and disclose about you;
Request deletion of your personal information;
Correct inaccurate personal information;
Opt out of the sale or sharing of your personal information (TRACT does not sell personal information);
Limit the use of sensitive personal information;
Not be discriminated against for exercising your privacy rights.

Virginia, Colorado, Connecticut, Texas, Oregon, and Other State Residents: If you reside in a state with a comprehensive privacy law, you may have similar rights to access, correct, delete, and port your personal information, as well as the right to opt out of certain data processing activities. To exercise any of these rights, contact us at help@gettract.com.

European Economic Area (EEA) / United Kingdom Residents (GDPR): If you are located in the EEA or UK, the following applies:

Lawful Basis: We process your personal data on the basis of (a) performance of our contract with you to provide the Services; (b) our legitimate interests in operating and improving the Services; and (c) your consent, where applicable.
Your Rights: You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. You also have the right to withdraw consent at any time.
International Transfers: Your data is transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to safeguard international data transfers.
Data Processing Agreement: Enterprise and EU customers may request a Data Processing Agreement (DPA) by contacting help@gettract.com.
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

To exercise any privacy right, please email help@gettract.com. We will respond within 30 days (45 days for CCPA requests, with possible 45-day extension with notice).

Data Breach Notification

In the event of a data breach affecting your personal information, Timber Apps, LLC will comply with all applicable federal and state breach notification laws. We commit to notifying affected Users within 72 hours of confirming a breach that poses a risk to your rights and freedoms. Notification will include: (a) a description of the nature of the breach; (b) the categories of data affected; (c) the likely consequences; and (d) measures taken or proposed to address the breach.

Limitation of Liability

We will use reasonable efforts to comply with this Privacy Policy and will take prompt corrective action when we learn of any failure to comply. Due to the complex and constantly changing nature of technology and security risks associated with Internet-based services, we do not guarantee error-free performance under this Privacy Policy. To the extent permissible under law, Timber Apps, LLC is not liable for any incidental, consequential, or punitive damages relating to this Privacy Policy.

Changes to This Privacy Policy

TRACT reserves the right to modify this Privacy Policy at any time. When we make material changes, we will notify Users by email or through the Services prior to the changes taking effect, and we will update the “last updated” date below. We encourage Users to review this Privacy Policy periodically. Continued use of the Services after changes become effective constitutes acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a privacy-related complaint, please contact us:

Timber Apps, LLC (d/b/a TRACT)
Email: help@gettract.com
Website: gettract.com/contact

LAST UPDATED: March 2026