Privacy Policy

TrackMyWire provides informational and analytical tools relating to international bank transfers and payment planning. This Privacy Policy explains how TrackMyWire, referred to in this notice as “we”, “us” and “our”, collects, uses, stores and discloses personal information when you use our website and Service.

For the purposes of applicable data-protection law, TrackMyWire is the responsible party or controller for personal information processed through the Service, subject to applicable law.

We collect information that you provide, information generated through use of the Service, and limited information from the devices and services used to access it. This may include:

• Account and identity data: your email address, account identifiers, and authentication or session information. Account access uses email magic links; we do not ask you to create a TrackMyWire password.
• Transfer and payment-planning inputs: origin and destination countries, currencies, bank selections, amount, sent or planned date, transfer mode, and transfer status or confirmation. Please do not provide bank-account numbers, payment-card numbers, banking passwords, PINs, online-banking credentials, or security codes. They are not needed to use the Service.
• Reminder and communication data: reminder email addresses, delivery and send-status information, and communications you send to us.
• Payment and subscription data: Paystack customer or subscription identifiers, payment reference and status, purchased product, and Tracking Credit or subscription entitlement status. Payment-card processing is handled by our payment processor; we do not intend to store full payment-card credentials.
• Technical and security data: browser, device and session-related information; network information such as IP address received with a request; and security or abuse-prevention signals. Where used for anonymous abuse controls, TrackMyWire stores derived or hashed identifiers rather than raw anonymous browser tokens or raw IP addresses.
• Anonymous-use data: an HTTP-only anonymous identity token in your browser and associated hashed identifiers used to maintain anonymous transfer state, apply free-use limits, and prevent misuse. We do not use this description to disclose security implementation details.
• Analytics and usage data: pages viewed, feature and CTA interactions, flow or mode, referrer, acquisition and UTM information, and browser or device information. TrackMyWire also records a limited first-party page-view and short visit-session record for product measurement; it stores sanitised paths, coarse referrer domains and UTM values, not query strings, clickstreams, raw traffic-session tokens or IP addresses. We use Google Analytics for analytics and measurement.

We use personal information as necessary to:

• provide Track and Plan functionality, generate and display analytical estimates, and maintain transfer history or state;
• authenticate accounts, send magic links, reminders and service communications, and record transfer confirmations;
• provide, administer and support Tracking Credits, Pro subscriptions and payments;
• respond to support requests;
• protect the Service, prevent fraud and misuse, enforce reasonable usage limits, and investigate security incidents;
• measure usage, improve the Service, troubleshoot errors and performance issues, and develop features; and
• meet legal, accounting, regulatory and compliance obligations.

Where data-protection law requires a legal basis, we process personal information as needed to provide the Service you request or perform our agreement with you; for our legitimate interests in operating, securing, improving and understanding the Service; to comply with legal obligations; and with consent where consent is required. The applicable basis may depend on the information and purpose involved.

We do not sell personal information. We may share information with service providers that process it on our behalf and only as needed to provide their services, including Supabase for database and authentication services, Vercel for hosting and infrastructure, Paystack for payment processing, Resend for reminder-email delivery, and Google Analytics for analytics.

We may also disclose information to professional advisers, insurers, prospective successors in a merger, acquisition or similar transaction, or authorities and other parties where required by law or reasonably necessary to protect rights, safety, security or the Service. These recipients do not receive unrestricted ownership or use rights over your information.

Our providers may process information in South Africa or other countries. Those countries may have data-protection laws different from those where you live. Where required, we seek to use appropriate contractual, organisational or other lawful safeguards for international transfers of personal information.

We retain information for no longer than reasonably necessary for the purposes described in this Policy. Retention depends on the category and context: account information is generally retained while an account is active; transfer and reminder records while needed for Service functionality; payment and accounting records as legally required; security and abuse-prevention records while needed to prevent fraud or enforce limits; and analytics data according to the applicable provider configuration. We may retain information longer where necessary for legal obligations, accounting, disputes, fraud prevention or security.

Depending on applicable law, you may have rights to request access to, correction or deletion of personal information; restriction of or objection to processing; portability; and withdrawal of consent where processing relies on consent. You may also have the right to complain to a relevant regulator. To make a request, email support@trackmywire.com. We may need to verify your identity before responding.

If you are in South Africa, you may have the right to lodge a complaint with the South African Information Regulator, where applicable.

We use cookies and similar technologies that are necessary for functionality, authentication, session continuity and security. For example, the Service uses an HTTP-only anonymous identity cookie to support anonymous transfer state and abuse prevention. We also use Google Analytics and related technologies to understand site and Service use, including pages, interactions, referrers and technical information.

Your browser may allow you to limit or delete cookies, but doing so can affect Service functionality. This Policy describes current practices only; it does not itself change browser, cookie or analytics settings.

The Service is not intended for individuals under 18. We do not knowingly collect personal information from children under 18.

We may update this Privacy Policy from time to time. We will post the revised version here and update the “Last Updated” date. Where appropriate, we may provide additional notice of material changes. This Policy does not limit rights that cannot be limited under applicable law.

For privacy questions or requests, contact us at support@trackmywire.com.