Last Updated: July 2026
Panatrack, Inc. (“Panatrack,” “we,” “us,” or “our”) respects your privacy. This Privacy Statement explains what personal information we collect, how and why we use it, who we share it with, and the choices and rights you have. It applies to our website at panatrack.com and related pages (the “Site”), to our sales, marketing, and support activities, and to the information we hold about the people who represent our customers and prospective customers.
This Statement does not govern the information that resides inside the Panatrack products a customer uses, which the customer submits and controls as the controller of that information. How that information is handled depends on how the product is deployed, and is governed by the customer’s agreement for that product rather than by this Statement. For services Panatrack hosts in the cloud, Panatrack processes that information on the customer’s behalf as a service provider/processor under the Data Processing Addendum within the applicable . For software that is installed and operated on the customer’s own premises or systems — including on-premise products and any on-premise component of a cloud service — that information remains within the customer’s environment under the customer’s control; Panatrack does not host it and, in the ordinary course, does not process it, and any handling is governed by the customer’s license and services agreement for that product. If you are an employee or contact of one of our customers and have questions about data held inside a Panatrack product, please contact that customer, who is the controller of that information. See “Our Role” below.
1. Our Role: Controller and Processor
Panatrack acts in two different capacities depending on the information involved.
As a controller, Panatrack decides how and why information is used. This applies to the information described in this Statement: Site visitors, marketing and prospect contacts, and the account, billing, and contact information of the individuals who represent our customers. Our customer agreements recognize this expressly: Panatrack processes the limited account, contact, and billing information of a customer’s administrators, billing contacts, and other business representatives as an independent controller, including in our customer-relationship-management and billing systems, and that processing is governed by this Statement.
As a processor (service provider), Panatrack handles information only on a customer’s documented instructions and only to provide the product. This applies to Customer Data and to the activity of a customer’s authorized users within the services Panatrack hosts in the cloud. That processing is governed by the customer’s agreement and the Data Processing Addendum, not by this Statement, and the customer is the controller.
For software installed and operated on the customer’s own premises or systems — whether an on-premise product or an on-premise component of a cloud service — the customer runs the software in its own environment, and the customer’s operational data stays within that environment. Panatrack does not host that data and, in the ordinary course, does not process it. Panatrack personnel access it only when reasonably necessary to provide support or professional services at the customer’s request, and that access is governed by the customer’s license and services agreement for that product and its confidentiality obligations. As with the services Panatrack hosts, the customer is the controller of that data.
2. Information We Collect
We collect personal information in the following categories, from the sources noted.
Site usage and device information. When you visit the Site, we and our analytics and advertising providers automatically collect your IP address, device and browser type, operating system, referring pages, pages viewed, links clicked, approximate location derived from your IP address, and similar usage data, primarily through cookies and similar technologies. See Section 5 (Cookies and Analytics).
Contact and inquiry information. When you complete a form, request a quote or demo, subscribe to communications, contact support, or otherwise reach out, we collect your first and last name, business email address, business telephone number, company name, job title, and the content of your message or request.
Marketing and prospect information. We collect information about your interactions with our emails, advertisements, and Site (such as opens, clicks, and pages viewed), and we may receive business contact details and company information from lead-generation and marketing providers, events, and publicly available business sources.
Customer and representative information. For the individuals who administer, are billed for, or otherwise represent a customer account, we collect account and contact details, billing and payment contact information, support communications, and access and activity logs relating to account administration.
We do not intend to collect Social Security numbers, government identification numbers, precise geolocation, or other sensitive personal information through the Site, and we ask that you not send such information to us through Site forms or email.
3. How We Use Personal Information
We use personal information to:
operate, secure, maintain, and improve the Site;
respond to inquiries, provide quotes and demonstrations, and communicate with you;
establish, administer, invoice, and support customer accounts and our business relationship;
send marketing communications about our products and events, where permitted, and measure and improve those communications;
conduct analytics and understand how the Site is used;
maintain our business and financial records;
protect our rights, property, and safety and those of others, prevent fraud and misuse, and enforce our terms; and
comply with legal obligations and respond to lawful requests.
Legal bases (GDPR/UK GDPR). Where the EU or UK GDPR applies, we rely on: your consent (for example, non-essential cookies and certain marketing); our legitimate interests in operating, securing, and promoting our business (balanced against your rights); the performance of a contract with you or the entity you represent, or steps taken at your request before entering one; and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.
4. How We Share Personal Information
We do not sell personal information for money. We share personal information only as described here:
Service providers and subprocessors. We share information with vendors that perform services for us under contracts that limit their use of the information, including cloud hosting and infrastructure providers, our customer-relationship-management and billing systems, payment processors, email and communications providers, and support tooling.
Analytics and advertising partners. We work with analytics and advertising providers (such as Google, Meta/Facebook, LinkedIn, and Leadfeeder) that may receive Site usage information and online identifiers through cookies and similar technologies to help us measure and deliver marketing. Depending on your jurisdiction, some of this activity may be considered “sharing” for cross-context behavioral advertising or a “sale.” See Section 6 and Section 8 for your choices and rights.
Legal and safety. We may disclose information where required by law, subpoena, court order, or governmental request, or where we believe disclosure is necessary to protect our rights, enforce our terms, or protect the safety of any person.
Corporate transactions. In connection with a merger, acquisition, financing, reorganization, or sale of assets, we may disclose information to advisers and to a prospective or actual successor, subject to appropriate confidentiality protections.
We do not disclose Customer Data held inside our products except as permitted by the applicable customer agreement and Data Processing Addendum.
5. Cookies and Analytics
We use cookies and similar technologies for functional, preference, statistics/analytics, and marketing purposes. Our advertising and analytics partners include Google, Meta/Facebook, LinkedIn, and Leadfeeder, among others. For details on the specific cookies we use, their purposes, and their durations, and to manage your preferences, see our and the cookie banner on the Site.
Where required, we set non-essential cookies only with your consent, and you can change your choices at any time through the cookie banner or your browser settings. Our Site currently does not respond to browser “Do Not Track” signals; however, where required by law, we honor recognized opt-out preference signals such as Global Privacy Control (GPC) as described in Section 8.
6. Advertising Choices
You can opt out of non-essential and advertising cookies through our cookie banner. You can also use industry opt-out tools, including the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org), and adjust ad settings directly with providers such as Google, Meta, and LinkedIn. Residents of certain U.S. states have additional opt-out rights described in Section 8.
7. Data Retention
We keep personal information only as long as necessary for the purposes described in this Statement, after which we delete or de-identify it. Retention periods depend on the type of information and the purpose. For example, we retain marketing and prospect information until you unsubscribe or object, or until it is no longer useful for the purpose collected; we retain customer account, contact, and billing records for the duration of the relationship and for a reasonable period afterward to meet legal, accounting, and audit requirements; and we retain Site analytics data for the periods described in our Cookie Policy. We may retain information longer where required by law or to establish, exercise, or defend legal claims.
8. Your Privacy Rights
The rights available to you depend on where you live. To exercise any right, contact us as described in Section 14 (Contact Us). We will verify your request and respond within the time required by applicable law. You may use an authorized agent where the law permits. We will not discriminate against you for exercising your rights.
8.1 EEA and UK residents (GDPR/UK GDPR)
Panatrack is established in the United States and does not currently offer goods or services to, or monitor the behavior of, individuals in the EEA or UK. On that basis it is not subject to the EU or UK GDPR under their extraterritorial scope provisions and does not maintain a representative under Article 27. Where the EU or UK GDPR nonetheless applies to our processing, then, subject to conditions and exceptions in the law, you have the right to: access your personal data; correct inaccurate data; erase data; restrict or object to processing, including direct marketing; data portability; and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office). If our activities change so that we become subject to these laws on an ongoing basis, we will appoint an Article 27 representative as required and update this Statement.
8.2 California residents (CCPA/CPRA) and other U.S. state residents
Subject to conditions and exceptions in the law, you have the right to: know and access the personal information we collect, use, and disclose; correct inaccurate personal information; delete personal information; and opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell personal information for money, but our use of advertising cookies may constitute “sharing” (and, in some states, a “sale”). You can exercise this opt-out through the cookie banner, by using an opt-out preference signal such as Global Privacy Control (GPC), or by contacting us. We do not use or disclose sensitive personal information for purposes that would trigger a right to limit its use.
In the twelve months before the date of this Statement, we have collected and disclosed the following categories of personal information:
| Category (CCPA) | Examples | Sources | Disclosed to |
|---|---|---|---|
| Identifiers | Name, business email, phone, IP address, online/device identifiers, account ID | You; your device; cookies; lead-generation providers | Service providers; analytics and advertising partners |
| Customer records / commercial information | Billing and account contact details, transaction and order information | You; the customer you represent | Service providers (hosting, CRM, billing, payment) |
| Internet or network activity | Browsing and interaction data, email and ad engagement | Cookies and analytics | Analytics and advertising partners |
| Geolocation (approximate) | Coarse location derived from IP address | Your device; cookies | Analytics and advertising partners |
| Professional/employment information | Company name, job title | You; publicly available business sources | Service providers |
| Inferences | Marketing and interest profiles derived from the above | Derived by us and our partners | Analytics and advertising partners |
We use and disclose these categories for the business and commercial purposes described in Section 3.
9. Data Security
Panatrack maintains an information security program with administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction, consistent with recognized industry standards. These safeguards include hosting in secure data center facilities, encryption of data in transit and at rest, access controls, and monitoring, and Panatrack maintains a SOC 2 Type II examination of its platform. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. International Data Transfers
Panatrack is based in the United States and currently hosts data in cloud data centers located in the United States. When we transfer personal information from the EEA, UK, or other regions to a country that has not received an adequacy decision, we use appropriate safeguards, including the applicable Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum. You may contact us for more information about these safeguards.
11. Children’s Privacy
The Site and our products are intended for businesses and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
12. Third-Party Links
The Site may link to third-party websites and services that we do not control. This Statement does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review the privacy statements of any site you visit.
13. Changes to This Statement
We may update this Statement from time to time. When we do, we will revise the “Last Updated” date above and, where required, provide additional notice. Your continued use of the Site after an update takes effect indicates your acceptance of the revised Statement.
14. Contact Us