Privacy Policy

Last updated: 7/27/2026

This Privacy Notice is issued by AgentEd Tracker ("AgentEd Tracker", "we", "us"), a business based in Colorado, United States, operating the AgentCE Tracker service at agentcetracker.com (the "Service"). Support inquiries: support@agentcetracker.com.

Data controller

AgentEd Tracker is the data controller responsible for the personal information collected through the Service. We determine the purposes and means of processing that information as described below.

Categories of personal data we collect

• Account details: name, email address, and password (hashed by our authentication provider).
• License details you enter: state, license type, license number, and renewal date.
• Continuing-education records: course name, provider, hours, category, completion date, and certificate files you upload.
• Support messages you send us.
• Usage and device data: pages visited, clicks on partner school links, onboarding progress, email delivery events, IP address, browser type, and device identifiers.
• Payment metadata from our merchant of record (Paddle). We never see or store full card numbers.

Purposes and legal basis

• Provide the Service — tracking your CE hours and license renewal deadlines, sending reminder emails at 60, 30, 14, 7, and 2 days before renewal. Legal basis: performance of a contract.
• Account creation and authentication. Legal basis: performance of a contract.
• Process subscription payments through Paddle. Legal basis: performance of a contract and legal obligation (tax/invoicing).
• Customer support and transactional communications. Legal basis: performance of a contract and legitimate interests.
• Security, fraud prevention, and abuse monitoring. Legal basis: legitimate interests and legal obligation.
• Product improvement using aggregated, non-identifying usage patterns. Legal basis: legitimate interests.
• Marketing emails (only where you opt in). Legal basis: consent, which you can withdraw at any time.

Sharing and recipients

We do not sell your personal information. We share limited data with the following categories of recipients strictly to operate the Service:

• Service providers / subprocessors: our cloud hosting and database provider, and our email delivery provider.
• Merchant of Record — Paddle (Paddle.com Market Limited): for sale of the subscription, subscription management, payment processing, tax compliance, and invoicing. Paddle acts as an independent controller for the payment transaction.
• Professional advisers (legal, accounting) as necessary.
• Authorities where disclosure is required by law.
• Partner schools: receive only a click-through referral. No personal data is transferred.

Data retention

We retain personal data only for as long as needed for the purposes above:

• Account, license, and CE records: for the life of your account and up to 24 months after account closure, so you can reactivate without losing your history.
• Payment and tax records: up to 7 years, to comply with tax and accounting laws.
• Support messages and email logs: up to 24 months.
• Usage/analytics data: up to 24 months in identifiable form, then aggregated or deleted.

When data is no longer needed, we delete or anonymize it.

Your rights and choices

• Access, correct, or delete your license and certificate records at any time from your dashboard.
• Request a copy of the personal data we hold about you, or ask us to correct or delete it.
• Object to or restrict certain processing, or withdraw consent for marketing emails.
• Cancel your subscription at any time to stop future billing.
• Email us to request full account and data deletion.

We respond to verified requests within 30 days. Residents of the EU/UK have additional rights under the GDPR/UK GDPR, including the right to lodge a complaint with your local data protection authority. California residents have rights under the CCPA/CPRA.

Security

We use appropriate technical and organizational measures designed to protect your personal information, including: encryption in transit (HTTPS/TLS), encryption at rest for our database and file storage, hashed passwords, role-based access controls, row-level security in our database, principle-of-least-privilege for staff and service accounts, audit logging, and regular review of access. No system is 100% secure, but we work to promptly address any vulnerabilities we discover.

International transfers

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Cookies

We use strictly necessary cookies for authentication and session management. We do not currently use advertising cookies. If that changes, we will update this notice and provide a cookie preferences control.

Children

The Service is for licensed real estate professionals and is not directed to children under 16.

Changes

We may update this Privacy Notice from time to time. Material changes will be notified via email or an in-app notice.

Contact

Questions or privacy requests: support@agentcetracker.com.