Privacy & Data Handling

Notice & Transparency Overview

Please note that this document is a practical product and privacy overview describing how the SourceTrack platform handles data. It is provided for transparency and does not constitute formal legal certification.

1. Privacy-Conscious Design

SourceTrack is built as a privacy-conscious attribution platform. Our goal is to connect marketing efforts to actual conversion outcomes with the minimum necessary data collection. Unlike broad analytics suites, we do not build cross-site behavior profiles or sell customer telemetry data.

2. Data We Collect

When a workspace installs our tracking pixel, we collect analytics events submitted by that website. This includes:

• Pageviews, referrer headers, and landing page paths.
• Campaign parameters (UTM tags, click identifiers like GCLID).
• AI discovery referrers (e.g., ChatGPT, Claude, Gemini, Perplexity).
• Conversion events (signups, purchases, and custom events configured by the workspace owner).

3. IP Addresses & Geolocation

SourceTrack uses IP addresses solely to determine approximate geographic location (country level) during ingestion. We discard raw IP addresses immediately after country classification and do not store them in long-term ClickHouse event logs.

4. No Third-Party Selling

We do not sell, rent, or trade event data to data brokers or advertising networks. Workspace data remains strictly isolated under Row-Level Security (RLS) to the owning account.

5. Optional Ad Platform Integrations

SourceTrack offers optional integrations with advertising platforms (Meta Ads, Google Ads) to help merchants measure campaign performance and attribution:

Reading Ad Spend Data: When you connect your Meta Ads or Google Ads account, SourceTrack reads your ad campaign spending, impressions, and clicks solely to align them with your conversion data for accurate ROI attribution. This read-only access is controlled by you via OAuth consent.

Sending Conversions to Meta (CAPI): When enabled, SourceTrack forwards your website conversion events to Meta’s Conversions API (CAPI) so Meta can measure ad performance on your behalf. This is a server-to-server integration you authorize — Meta receives only the conversion data necessary to match campaigns to outcomes.

Your Control: All platform integrations are optional. You control which platforms to connect, can disconnect at any time, and can configure which conversions to forward. Enabling these integrations does not change how your data is stored or accessed within SourceTrack — your data remains isolated and under your full control.