TrackPulse Privacy Policy

Effective Date: February 25, 2026  |  Last Updated: June 12, 2026

TrackPulse ("we," "our," or "the Service") is a Gmail™ add-on developed by Stella Sourcing LLC that detects shipment tracking numbers in your emails as you view them and provides real-time shipment status updates. This Privacy Policy explains what data we access, how we use it, where it is processed, and how we protect it.

1. Information We Access

Gmail Messages (Current Message, Read-Only): When you open an email in Gmail with the TrackPulse sidebar active, we read the subject line and body text of that email (including PDF attachments on that email) to identify air waybill (AWB) and tracking numbers. We store only a brief snippet (up to 200 characters) of the email text surrounding a tracking number, for context display. We do not store or process the full content of your emails. TrackPulse has read-only access to the currently open email and its conversation thread; it cannot search your inbox, and it cannot modify, delete, move, or send emails on your behalf.

Manual Entry: You may also paste tracking numbers directly into TrackPulse using the manual entry box. No email data is accessed for manually entered tracking numbers.

User Profile: We access your Google™ email address for authentication purposes and to keep your shipment data separated from other users.

Website Early-Access Form: If you request early access at trackpulseapp.com, we collect the name, work email address, and company name you submit. This information is stored in our Google Workspace™ account, used only to manage beta invitations and product updates, and deleted on request.

2. How We Use Your Data

To return delivery status, TrackPulse sends the tracking number and carrier code to the TrackPulse tracking service (our own server, described in Section 4), which retrieves status from our carrier-tracking provider, EasyPost. Status updates and the most recent tracking event (which may include a city or location reported by the carrier) are returned to your device and associated with your TrackPulse account.

Your competitively sensitive information — such as the link between a brand and a mill, shipper and customer names, contact details, and notes — is stored only on your own device inside your Google account (Google Apps Script™ user storage) and is never transmitted to our server or to any third party, with one exception: if you enable the optional Slack™ integration, the status summaries you configure (shipper name, customer name, tracking number, carrier, status) are sent to the Slack workspace you designate.

If you use the Export feature, a file is generated and downloaded directly to your device. No data is stored externally during this process. Email alert notifications, if enabled, are sent using Google's built-in email service.

To operate fair-usage limits on free plans, our server counts how many shipments your account tracks each month. This count is linked to your account identifier only and contains no tracking numbers, shipment details, or email content.

We do not use your data for advertising, marketing, profiling, or any purpose other than providing the TrackPulse shipment tracking service.

3. Google API Services User Data Policy (Limited Use)

TrackPulse's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

4. Where Your Data Is Processed and Stored

TrackPulse has two parts:

On your device (your Google account): Tracking snippets, shipper and customer names, contact details, notes, and other enrichment are stored in per-user Google Apps Script storage that is isolated to you. No other user can access your data, and this enrichment data is not visible to the developer.

The TrackPulse tracking service (our server): Hosted on Google Cloud Platform in the United States. To deliver status updates, this server stores a pseudonymous account identifier (a one-way cryptographic hash; your plain email address is never stored on the server), the delivery status and most recent tracking event for your shipments, your monthly usage count, and your Slack webhook URL if you enable Slack. The server does not store your raw tracking numbers, your email content, or your business relationships. Access to server data is recorded in audit logs.

5. Third-Party Services (Sub-Processors)

TrackPulse relies on the following service providers to operate. We maintain a data processing agreement (DPA) with each. We share with them only the minimum data needed for their function:

No data is transmitted to any other external service. The add-on's outbound network requests are restricted by an allow-list to the TrackPulse tracking service and Slack webhooks.

6. Data Sharing

We do not sell, rent, trade, or share your personal data with any third parties except as described in Section 5, and only to provide the tracking service. We do not share your data with advertisers, data brokers, or analytics providers.

7. Data Retention and Deletion

Active shipment data on your device is retained for up to 30 days; delivered shipments are automatically archived and eventually removed through built-in storage management. Data held by the TrackPulse tracking service is automatically deleted after 90 days of inactivity.

You can erase your data at any time:

8. Data Security

Data is encrypted in transit (TLS) and at rest (AES-256) on Google Cloud Platform, which maintains ISO 27001 and SOC 1/2/3 certifications. Authentication is handled through Google's OAuth 2.0 system; we never see or store your Google password. Access to the tracking service is authenticated per-request and recorded in audit logs. In the event of a data breach affecting your personal data, we will notify affected users without undue delay.

9. OAuth Scopes Used

TrackPulse requests the following Google OAuth permissions. Each scope is used for a specific, necessary purpose:

10. Your Rights

You have the right to:

If you are located outside the United States, note that the Service processes data in the United States as described in Section 4. We honor the rights above for all users regardless of location.

11. Children's Privacy

TrackPulse is a business-to-business shipment tracking tool and is not intended for use by individuals under the age of 13. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through the add-on interface or via email. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of TrackPulse after changes constitutes acceptance of the updated policy.

13. Contact Us

Stella Sourcing LLC
Email: info@stellasourcing.com
Website: https://trackpulseapp.com

Google, Gmail, Google Workspace, and Google Apps Script are trademarks of Google LLC. Slack is a trademark of Salesforce, Inc. EasyPost is a trademark of EasyPost, Inc. Stripe is a trademark of Stripe, Inc. TrackPulse is not endorsed by or affiliated with Google LLC, Salesforce, Inc., EasyPost, Inc., or Stripe, Inc.