Privacy

What we collect, and why.

Last updated 15 September 2026.

Your account

Your email address and, from Google sign-in, your name. The address is where reminders are sent. We also store the timezone you enter so deadlines are shown in it, your reminder preference, your base currency and whether amounts in other currencies are shown converted, and the optional answers you give in Settings about how you work, what you build and your monthly software budget.

Drafts before you have an account

When you start on the homepage, what you type (tool name, dates, an optional price and account label) is saved as a draft on our server under a random identifier kept in a cookie in your browser. The draft is bound to the first account that opens it and is used once to create the subscription. Drafts expire after seven days and are then deleted. You can also discard one from the confirmation page.

Subscriptions and free trials you track

The vendor, dates, price, billing terms, charge dates, refund windows, notes and reminder settings you enter or confirm, and the reminders sent. Also the payments you record against a subscription, the card labels you create (a nickname and, if you choose, the last four digits), the products you create with their budgets, and the share of each subscription you allocate to a product.

The decisions you record about a subscription, such as cancelling it, not converting a trial or keeping a renewal, with the date, a copy of the terms at the time and any note. They are what avoided-cost history is calculated from. A recorded decision is not edited afterwards: correcting one records a reversal beside it.

Subscriptions can be edited, archived or permanently deleted from the tracker, and permanently deleting one deletes its recorded payments and decisions with it. Products can be edited, archived or permanently deleted from their own pages; deleting one removes its shares and budgets and leaves every subscription in place. Card labels can be edited or retired from Settings.

Gmail, if you connect it

Described in full on Email access and security. In short: read-only access, the mailbox address, an encrypted refresh token, and the extracted details of suggestions (sending domain, subject line, date, message identifier, vendor, dates, price) while you review them. Message bodies and attachments are not stored, and nothing is sent or changed in your mailbox. Disconnecting deletes the token and the suggestions from that mailbox and asks Google to revoke the grant. The mailbox address stays on your account.

Copilot, if you use it

Copilot is an assistant included with Solo Founder. It uses OpenAI. Nothing is sent to OpenAI unless you use Copilot, and some requests, such as the example prompts, your answers to its questions, drafts and confirmations, are handled without contacting OpenAI at all.

When a request does need OpenAI, we send it your message, a few recent messages from the same conversation, today's date, your timezone and reporting currency, and a compact summary of the records needed to answer: for example vendor names, account labels, prices, billing terms, dates, product names and shares, and, when a request is about how a subscription is paid, a card label's nickname and last four digits. We do not send your notes, any Gmail message content, Google access tokens or full card numbers, which TrackSignUp never stores. OpenAI processes this under its API data usage policies. We ask it not to keep the response for later retrieval, which on its own does not mean OpenAI retains nothing.

Copilot only prepares changes. Nothing is saved to your tracker until you press a confirmation button, and it cannot cancel anything with a vendor. In your account we keep the Copilot conversation for 30 days after its last message, or until you clear it; drafts for 30 days after their last change, or until you delete them; prepared changes for 30 days, or with your account when you confirmed them; and, for each change you confirmed, a record of what was changed, kept with your account. For each request we also record the model used, token counts, cost, duration and outcome, but not the message, to apply the monthly message allowance.

Exchange rates

To show amounts in your base currency, our server fetches published European Central Bank reference rates from Frankfurter. The request contains only currency codes and dates; nothing about you or your subscriptions is sent. The rates are kept on our server so the same day is not fetched twice.

Reminder email

Reminder emails are sent through Resend to your account address. We keep a record of when each reminder was accepted by the mail provider so it is not sent twice.

Billing

Payments for Solo Founder are processed by Stripe. Card details are entered on Stripe's checkout page and never reach our servers. We store Stripe's identifiers for your customer and subscription, the subscription status, and the events Stripe sends us about it, so your plan reflects what you have paid for.

Product analytics

We record a small set of events about the flow itself, such as a subscription being saved, a reminder being scheduled or sent, a card label being attached, a subscription being given a share of a product, a charge being recorded, or the monthly overview being opened. Each carries your account identifier and a few fixed attributes such as which plan or which entry method, and, for your first saved subscription, how many seconds it took from starting to saving it.

On the Resources pages we also count which article was opened and which contents entry, related article, article link or call to action was chosen. These records are not linked to an account, even when you are signed in: they hold only the article and heading identifiers, the topic and a position in a list. Your browser keeps a random identifier in session storage for 30 minutes so that one visit is not counted twice.

The list of events and the list of attributes are both closed, and anything else is discarded before it is stored. These records never contain your email address, a card nickname or its last four digits, an amount, a currency, a vendor or product name, a note, invoice content, inbox addresses, message content, URLs or the contents of forms.

Removing your data

Delete subscriptions from the tracker (which deletes their payments and decisions), delete products from their pages, retire card labels in Settings, disconnect mailboxes from Settings › Inboxes, and clear Copilot chat history from the Copilot panel. To have the account and everything under it removed, email support@tracksignup.com. There is no self-service account deletion yet.

Who we are

TrackSignUp is operated by TrackSignUp. Contact: support@tracksignup.com.