Privacy Policy

CPDTracks ("we", "our", or "the service") is committed to protecting your privacy. This policy explains how information is handled when you use the CPDTracks website and web application.

Information We Collect

We collect the information needed to provide and protect the service:

• Account and profile information: Your email address, name, optional phone number, professional track, designation and membership or registration details you choose to provide.
• CPD records: Activities, hours, plans, focus areas, competency assessments, reflections, career-break information, evidence links and files you upload.
• Preferences and communications: Reminder settings, newsletter consent, feedback and support messages.
• Subscription status: Whether the email on your CPDTracks account has an active membership. We do not store your complete payment-card details.
• Product-use records: Limited timestamps and counts for meaningful actions such as starting or completing a plan or reflection, creating an activity, uploading evidence, and exporting or restoring reports and backups. These records do not copy the contents of your plans, activities, reflections or files.
• Technical information: Security, diagnostic and request information generated when the service is used. The public marketing site also uses Google Analytics.

How We Use Your Information

Your data is used solely to provide the CPDTracks service to you:

• To track and manage your CPD hours and activities
• To generate CPD reports and summaries
• To provide reminders about deadlines and requirements
• To enable backup and restore of your data
• To authenticate your account, protect the service and troubleshoot problems
• To verify your membership and provide the features included with it
• To review support issues, payment disputes and requests for exceptional discretionary refunds
• To send reminder or account emails you request

Data Storage & Security

CPDTracks is a hosted web service. Account and CPD data is stored using Supabase, while the application is hosted and delivered through Cloudflare. Data is transmitted over HTTPS and access controls are used to isolate each user's records.

No online service can promise absolute security. Use a unique password, protect access to your email account, and contact us promptly if you believe your account has been accessed without permission.

Data Sharing

We do not sell your CPD records or use them for advertising. Information is shared only with service providers needed to operate CPDTracks, when you ask us to export or share it, or where disclosure is required by law.

Third-Party Services

• Supabase: Account authentication, database and hosted-file storage.
• Cloudflare: Application hosting, delivery, security and scheduled processing.
• Resend: Account and optional CPD reminder email delivery.
• Paddle: Subscription processing, invoicing and entitlement verification, as our merchant of record for VAT and sales tax. Their own privacy terms apply when you subscribe.
• Google Analytics: Usage measurement on the public marketing website.

Your Rights

You have full control over your data:

• You can view and edit your CPD records while signed in
• You can download a portable complete backup, including your completed current-year final PDF
• You can delete your account and CPD data from Settings
• You can request information about your data by contacting us

Retention

Your records remain available while your account exists, subject to the retention choices you make in Settings. You can configure automatic prior-year deletion with advance notice. If your membership lapses, hosted files and prior-year data are temporarily retained before deletion so that you have an opportunity to renew and recover access.

Limited product-use events are retained while your account exists so that deleted or replaced records cannot make a support or refund review misleading. These events record only the type and time of an action, the relevant CPD year and an internal record identifier. They are removed when the account is deleted.

Cookies

The web application uses cookies required to keep you securely signed in. The public website may use analytics cookies or similar browser storage associated with Google Analytics.

Children's Privacy

CPDTracks is designed for professional accountants and is not intended for use by children under the age of 18. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the app and on this page.

Contact Us

If you have questions about this Privacy Policy, please contact us:

Email: hi@dadthe.accountant

Website: www.dadtheaccountant.com

POPIA Compliance

CPDTracks is designed to support the access, correction and deletion rights associated with privacy laws such as South Africa's Protection of Personal Information Act (POPIA). Contact us if you want to exercise a right that is not available directly in the service.