PayTrack runs on secure, managed cloud infrastructure, with the primary database hosted in Southeast Asia (Singapore). Your business profile, vendors, bills, payment records, and settings are stored in a managed cloud database, and uploaded invoices and attachments are kept in private cloud file storage.

Attachments are never stored in a public, openly-accessible location. When you open one, PayTrack generates a temporary, expiring link so only your authorized users can view it.

A few support services, such as analytics and error monitoring, may process limited technical data in other regions (for example, the United States).

All communication between the app and our servers is encrypted in transit using industry-standard HTTPS/TLS.

Data stored on our managed cloud platform is protected by that platform's built-in encryption safeguards. You are responsible for keeping your own login credentials and devices secure.

Access is enforced at the database level using row-level security. Every vendor, bill, and attachment is tied to a specific business, and the database only returns records to members of that business who hold the right permission.

This means your uploaded invoices and business records are visible only to users your business has authorized — not to other businesses, and not to anyone without a valid, permitted account.

PayTrack is built for teams. A business can invite multiple people by email and assign each a role: Owner, Admin, Manager, or Staff.

Beyond roles, you can grant or restrict granular permissions per member — separately controlling who can view, add, edit, or delete vendors and bills, mark bills paid, export data, view the activity log, and manage the team. Staff only see the actions they're permitted to use, and the database enforces those limits too.

Every meaningful change is recorded automatically. The activity log captures who made the change, what action they took (created, updated, or deleted), which vendor or bill it affected, and when — with a before-and-after snapshot.

This gives owners and admins a clear history of team activity. The log is written by the system and cannot be edited by app users.

Your data is hosted on managed cloud infrastructure that maintains backups as part of its standard platform operations. We do not currently promise a specific backup frequency, recovery time, or uptime guarantee.

Because your records matter, we recommend exporting your bills and vendors to CSV regularly — this is built into the app, so you always keep your own copy.

The business, vendor, bill, and file data you enter belongs to you. We store and process it only to provide PayTrack — we do not sell it, and we do not use your business records for advertising.

You can permanently delete your account and its data from within the app. Deleting your account removes your profile and the businesses you created — including their vendors, bills, attachments, and members. For businesses you only joined, your access and membership are removed.

Some limited records may persist briefly in routine backups before they cycle out, or where retention is required by law.