Privacy Policy

This Privacy Policy describes how Tenatrak Software LLC (“Tenatrak,” “we,” “us”) handles information in connection with the EngiTrak product and marketing site at engitrak.com and app.engitrak.com (the “Service”). EngiTrak is a product of Tenatrak Software LLC.

Related Terms of Service: https://engitrak.com/terms.html.

1. Who we are

Tenatrak Software LLC
1655 NW 7th Ave
Hillsboro, OR 97124
Contact: info@tenatrak.com

2. Information we collect

Depending on how you use EngiTrak, we may collect:

• Account information — name, email address, and basic profile details when you sign up by email or when you sign in with Microsoft Entra ID (Microsoft SSO). For Microsoft sign-in we receive name, email, and basic profile under OpenID Connect scopes such as openid, profile, and email.
• Billing information — subscription and invoice records processed by Stripe. We do not store full payment-card numbers on our servers; Stripe processes card payments.
• Your business data — what your team enters into EngiTrak (such as customers, jobs, sites, and schedules) is stored to run the Service for you. It belongs to you and is covered separately in Section 3 below.
• Communications — messages you send via contact forms or email (for example name, email, company, and message content), and transactional email related to invites, billing, or account notices when email delivery is enabled.
• Technical data — limited logs such as IP address, timestamps, and similar information needed to operate, secure, and troubleshoot the Service.

3. Your business data

“Your business data” (also called “Customer Data” in our Terms) means the information you or your Authorized Users enter into EngiTrak, such as customers, jobs, sites, schedules, assignments, and notes.

• It belongs to you. The data your team enters is owned by your organization (the customer), not by Tenatrak.
• We store it only to provide the Service to your organization. It is isolated per organization and is never shared with other customers.
• We do not access, review, analyze, sell, rent, or share it, and we do not use it for marketing, advertising, profiling, or to train AI models.
• Limited exceptions. Tenatrak personnel access it only when you ask us for support, or when required by law.
• You stay in control. You can export or delete it. On termination it is deleted as described in the Retention section below.

4. How we use account and billing information

Separate from your business data (Section 3), we use account, billing, communications, and technical information to:

• Provide, maintain, and secure the Service
• Authenticate users (including Microsoft sign-in) and manage tenants and seats
• Process subscriptions and billing via Stripe
• Send transactional messages (invites, receipts, security notices) when email delivery is enabled
• Respond to support and contact inquiries
• Prevent abuse and comply with law

We do not sell personal information.

5. Sharing; subprocessors

We use service providers that help us run EngiTrak, including:

• Railway — application hosting and Postgres database
• Stripe — payment processing and customer billing portal
• Microsoft — identity / sign-in when you choose Microsoft Entra SSO
• Email delivery provider — when transactional or invite email is enabled

These providers process data on our instructions only to provide their services to us (for example, Railway hosts the database where your business data is stored); they do not receive it for their own use. We may also disclose information if required by law, to protect rights and safety, or in connection with a corporate transaction (with appropriate continuity of protections).

6. Retention

We retain account information and your business data (Customer Data) while your account is active and as needed to provide the Service. After termination, you may request export within thirty (30) days as described in our Terms. We then delete your business data from production systems within a commercially reasonable period, except backups in ordinary cycle and data we must retain by law (for example billing records). Contact-form and support emails are retained as needed to respond and for ordinary business records.

7. Security

We use commercially reasonable security measures. Your business data in our production database is hosted on Railway with encryption at rest on Railway Postgres, and connections use TLS in transit. No method of transmission or storage is completely secure, and we do not claim SOC 2 or other certifications in this policy.

8. Your rights and choices

Depending on applicable law, you may request access, correction, or deletion of personal information we hold about you, or ask questions about our processing. Tenant administrators control your business data inside their EngiTrak tenant, including exporting or deleting it. To exercise rights or make a privacy request, email info@tenatrak.com. We may need to verify your request. You may also cancel your subscription via the Stripe Customer Portal and stop using the Service.

9. Children

EngiTrak is a business service. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10. International users

We are based in Oregon, United States. If you access the Service from outside the United States, you understand that information may be processed in the United States where laws may differ from those in your location.

11. Changes

We may update this Privacy Policy by posting a revised version and updating the “Last updated” date. Material changes may also be communicated by email or in-product notice where appropriate.

12. Contact

Privacy questions: info@tenatrak.com. Governing law for related disputes is Oregon, as stated in our Terms.

Last updated: September 24, 2026