1. Introduction
Welcome to ChampionTracker, operated by JC Software Insights ("we," "us," or "our"), a sole proprietorship registered with the Dutch Chamber of Commerce (KvK) under number 99941945. This Privacy Policy explains how we collect, use, and protect personal data when you use our website and SaaS platform.
2. Our Role in Data Processing
Under the GDPR, ChampionTracker acts primarily as a Data Processor on behalf of our customers (sales professionals, recruiters, and B2B teams), who act as Data Controllers. Our customers determine whose data is uploaded and tracked. We process this data strictly according to their instructions to provide our job-tracking service.
3. What Data We Collect
- Customer Account Data: Name, email, billing information (processed by Stripe), and authentication data (processed by Clerk) of our registered users, and, if you choose to answer it, how you found ChampionTracker.
- Prospect Data (Uploaded by Customers): Names, LinkedIn profile URLs, past job titles, and past company names of the individuals our customers wish to track.
- Derived Data: Publicly available job changes, inferred business email addresses, and related professional metadata.
- Technical Data: IP addresses, browser types, and usage logs necessary for security, abuse prevention, and platform functionality.
4. Why We Process This Data (Legal Basis)
- For Customer Account Data: To fulfill our contract with you (providing the SaaS platform and billing). Your optional answer to "How did you find ChampionTracker?" is kept for our legitimate interest in knowing which channels bring customers.
- For Prospect Data: Processed based on the Legitimate Interest (Article 6(1)(f) GDPR) of our customers in maintaining accurate B2B contact records for sales, recruiting, and networking purposes.
- For Technical Data: Legitimate interest in keeping the service secure and preventing abuse.
5. Data Sharing and Subprocessors
We do not sell your data. We share data with trusted third-party service providers (subprocessors) to operate our platform:
- DigitalOcean & Vercel – Cloud hosting and database infrastructure. Vercel also provides our page-visit statistics and page-speed measurements (Vercel Web Analytics and Speed Insights), which work without cookies.
- Clerk – User authentication and session management.
- Stripe – Payment processing.
- Resend – Sending emails to your account address: one welcome email after you sign up (how to get started), one email when a free trial ends (what it found and the plans), and the weekly summary email (the week's job changes: tracked contacts' names, new companies and roles, and your credit balance).
- LinkdAPI & Hunter.io / ZeroBounce – Public-data enrichment, email discovery, and email validation.
- Cloudflare – Domain name service, encryption of the connection (TLS) and protection against attacks.
- Google Workspace – Our mailbox: the emails you send us (support, privacy and billing requests) and our replies.
- PostHog (EU) – Product analytics, only if you accept optional cookies in the cookie banner.
- Sentry (EU) – Error reports that help us fix problems; they contain technical data about the error, not your tracked contacts.
6. Data Retention
We retain Customer Account Data for as long as your account is active. Prospect Data is retained only as long as the customer tracks that prospect: a prospect the customer removes is deleted at once. When a customer asks us to delete their account, we delete it and all its Prospect Data from our active databases within 30 days, cancel the subscription and delete the sign-in account. Backups are rotated within 90 days.
Security and audit logs are kept for up to 12 months and are deleted with the account. Technical records of how the service ran (checks, emails sent, processed payment events) are kept for 90 days. Invoices and payment records are kept for 7 years, as Dutch tax law requires. The suppression list (section 7) is kept for as long as it is needed to honour the opt-out.
7. Data Subject Rights (For Tracked Individuals)
If you are an individual being tracked by one of our customers and wish to opt-out, we maintain a Global Suppression List. You have the right to access, rectify, or request the deletion of your data. Email contact@championtracker-insights.com with your LinkedIn URL and within 5 business days we will delete what our customers hold about you in ChampionTracker (including your job-change history) and permanently block your URL from being processed by any of our systems. To do this we keep only a one-way fingerprint (hash) of your LinkedIn URL, not the URL itself; it can't be turned back into the URL.
8. International Transfers
Our servers and database are hosted in the European Union (Amsterdam). Some subprocessors are based in, or may process data in, the United States: Clerk, Stripe, Resend, Vercel, Cloudflare, DigitalOcean (the company; our servers are in Amsterdam), LinkdAPI and ZeroBounce. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses approved by the European Commission.
9. Security
We use industry-standard measures to protect your data, including encrypted transport (HTTPS), a database and cache that can only be reached from inside our own server's private network, encrypted daily backups, scoped API tokens, signed Stripe webhooks, and least-privilege access for all personnel.
10. Contact Us
For any privacy-related questions, contact us at:
JC Software Insights
Overschiestraat 170, 1062XK Amsterdam, Netherlands
Email: contact@championtracker-insights.com
KvK: 99941945