Privacy Policy

Last updated: October 10, 2026

Uloop, Inc. ("Uloop, Inc.", "we", "our", or "us") operates trackagoat at https://www.trackagoat.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and profile avatar. If you sign in with Google, we receive your name, email address, and profile photo from Google in accordance with your Google account permissions and Google's Privacy Policy.

Organization and Project Data

We store the organizations, projects, campaigns, goals, and creator configurations you create within the Service, along with any notes, descriptions, labels, or annotations you add to creators and videos. This data belongs to you and is used solely to operate the Service.

TikTok Creator and Video Data

trackagoat tracks publicly available TikTok creator and video data on your behalf. This includes creator usernames, follower counts, video view counts, engagement metrics, and posting frequency. We collect only data that is publicly accessible on TikTok. We do not collect any private account information, direct messages, or data requiring TikTok account credentials.

Public TikTok data is fetched and stored by our scraping infrastructure (powered by Apify) and associated with your account in our database. By directing us to track a TikTok creator, you represent that your use of that data complies with TikTok's Terms of Service and all applicable laws.

Usage and Log Data

We collect standard server log data including IP addresses, browser type, pages visited, and timestamps. This data is used for security, debugging, and improving the Service. We do not use third-party advertising trackers.

Website Analytics

On our public website (the home page, product, pricing, comparison, blog, changelog and documentation pages) we use Google Analytics to understand how visitors find and use the site, such as which pages are viewed, how long visits last, the referring site, and approximate location and device type. Google Analytics sets cookies to do this. It is not loaded inside the signed-in Service, on sign-in pages, or on creator share pages, so it never receives your account, creator or video data. You can opt out with Google's browser add-on or by blocking cookies in your browser.

Cookies and Local Storage

We use strictly necessary cookies and browser storage to maintain your authenticated session, remember your onboarding completion state, and support core Service functionality. On our public website, Google Analytics also sets analytics cookies (see Website Analytics above). We do not use advertising cookies or cross-site tracking cookies.

Communications

If you contact us for support or with questions, we retain those communications to help resolve your inquiry and improve the Service.

2. How We Use Your Information

To provide, operate, and maintain the Service
To authenticate your identity and maintain your session
To send transactional emails (account invitations, password resets, email confirmations)
To fetch and display TikTok metrics you have requested us to track
To send you important notices about the Service, including changes to our terms or policies
To improve the reliability, performance, and features of the Service
To investigate and respond to security incidents, abuse reports, or legal requests
To enforce our Terms of Service and other applicable policies

We do not sell, rent, or share your personal information with third parties for advertising, marketing, or any commercial purpose unrelated to operating the Service.

3. How We Share Your Information

Service Providers

We share data with third-party service providers who assist in operating the Service (see Section 4). These providers are contractually obligated to use your data only as directed by us and in accordance with this Privacy Policy.

Organization Members

Within the Service, members of your organization can see the projects, creators, campaigns, and tracking data you have created or contributed to within that organization. Administrators can see all data within their organization.

Legal Requirements

We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Business Transfers

If Uloop, Inc. is acquired, merges with another company, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

4. Third-Party Services

We use the following third-party services to operate trackagoat. Each has its own privacy policy governing its handling of data:

Supabase: database, authentication, and file storage. Your data is stored on Supabase infrastructure. See Supabase Privacy Policy.
Vercel: hosting and deployment platform. Serves the trackagoat web application. See Vercel Privacy Policy.
Apify: web scraping infrastructure used to collect publicly available TikTok data on your behalf. See Apify Privacy Policy.
Google (OAuth): optional sign-in provider. If you use Google Sign-In, Google processes your authentication. See Google Privacy Policy.
Google Analytics: website analytics on our public pages only (not the signed-in Service). See Google Privacy Policy.
Resend: transactional email delivery for invitations, confirmations, and password resets. See Resend Privacy Policy.
Railway: background job infrastructure that runs our scraping and data processing operations. See Railway Privacy Policy.

5. Data Retention

We retain your account data for as long as your account is active. TikTok creator and video statistics are retained indefinitely as they form the historical record the Service is built around.

If you delete your account, we will delete your personal account information (email address, display name, avatar) within 30 days of receiving your deletion request. Aggregated or anonymized data, and TikTok creator or video metric data not personally identifying you, may be retained after account deletion.

You may request deletion of your account by contacting us at support@trackagoat.com.

6. Data Security

We implement industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), row-level security policies on our database so that users can only access their own organization's data, and hashed storage of API keys. We regularly review our security practices.

However, no method of data transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

7. International Data Transfers

Uloop, Inc. is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. Data protection laws in those countries may differ from those in your jurisdiction.

If you are located in the European Economic Area, United Kingdom, or Switzerland, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) to transfer your data internationally in compliance with applicable data protection laws.

8. Your Rights

General Rights

Regardless of where you live, you have the right to access, correct, or delete the personal information we hold about you. To exercise these rights, contact us at legal@trackagoat.com.

GDPR Rights (EEA, UK, Switzerland)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under applicable data protection law:

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate or incomplete data
Right to erasure: request deletion of your personal data
Right to restrict processing: limit how we use your data
Right to data portability: receive your data in a structured, machine-readable format
Right to object: object to processing based on legitimate interests
Right to withdraw consent: where processing is based on consent, withdraw it at any time
Right to lodge a complaint with a supervisory authority in your country

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you
Right to Delete: request deletion of personal information we have collected from you, subject to certain exceptions
Right to Correct: request correction of inaccurate personal information
Right to Opt Out of Sale or Sharing: we do not sell or share your personal information with third parties for advertising; there is nothing to opt out of
Right to Non-Discrimination: we will not discriminate against you for exercising your privacy rights
Right to Limit Use of Sensitive Personal Information: we do not collect sensitive personal information as defined by CPRA

To exercise your California rights, submit a verifiable request to legal@trackagoat.com. We will respond within 45 days as required by law.

9. Do Not Sell or Share My Personal Information

We do not sell, rent, or share your personal information with third parties for advertising, cross-context behavioral advertising, or any commercial purpose. This applies to all users, including California residents. We have not sold or shared personal information in the preceding 12 months.

10. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@trackagoat.com and we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. For material changes, we will provide more prominent notice, either by email to the address associated with your account or by displaying a notice within the Service. Your continued use of the Service after a material change becomes effective constitutes your acceptance of the revised Privacy Policy.

12. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Uloop, Inc. (operating as trackagoat)

306 S. Washington Ave, Suite 400, Royal Oak, MI 48067

Email: legal@trackagoat.com