Effective Date: September 15, 2026 · Version v2026.09.15-1
This Privacy Policy explains how Coam Tracker, LLC ("Coam Tracker," "we," "us," or "our") collects, uses, and shares information in connection with the Coam Tracker™ application and website (the "Service"). By using the Service, you agree to the collection and use of information as described here.
Account information: when you or your business creates an account, we collect your email address, a chosen username, your store name, and a password, and — depending on how you sign up — your name, your store's address, and a phone number where we can reach you. If you add staff members, we collect the names you enter for them. All PINs (yours and staff members') are stored only as one-way cryptographic hashes — we do not store or have access to any actual PIN.
Transaction and business data: information you enter while using the Service, including redemption amounts and categories (such as lottery, gift card, and replay redemptions), gift card codes and balances — covering both gift cards issued as part of a redemption payout and ordinary retail gift cards a store sells, which the Service records separately — and daily Total In / Total Out reconciliation figures. This data belongs to you; see Section 5.
Product inquiries and demo requests: if you fill out the sign-up form on our website, the short form shown before opening a product demo, or the "Questions / Upgrade" form inside a product demo, we collect the name, phone number, email address, store name, and store address you provide, along with any message you send. We use this information to respond to you, and we may keep simple internal notes about our conversations with you, including which channel (for example, a messaging app or search engine) brought you to our website. Personalized demo links contain a random, non-guessable token rather than your personal details.
Customer gift card wallet: store customers may choose to keep gift cards on their phone using the Service's wallet page. A wallet is identified only by a random secret token stored on the customer's own device — we do not collect a wallet customer's name, phone number, email address, or any account information. The wallet shows only the gift cards a store has assigned to that token and their history. When a store redeems a wallet card, the customer receives an approval request on their device showing the amount before the redemption can complete.
Payment information: when you subscribe, payment is handled directly by our payment processor, Stripe. We do not receive or store your full card number. We retain a record that a payment was made, the plan selected, and billing history.
Device and usage information: basic technical information such as browser type, device type, and general usage of the Service, collected automatically to operate and improve the Service. This includes simple account-activity records, such as the time an account was last signed in or active ("last seen"), the app version in use, and small account preferences such as whether you have already seen an in-app notice, which we use to support you and troubleshoot problems. We also count visits to our public website: daily totals of page views and visitors, which page was viewed, whether the visit came from a search engine, a social or messaging app, or a link we shared (based on the referring site or a tag in the link), and whether a phone or a computer was used. These counts contain no names, no personal details, and no tracking across other websites. We do not collect precise location information.
Error reports: if the Service encounters a technical error on your device, we automatically collect a limited report (the error message, the app version, your store name, the screen involved, and browser type) so we can find and fix problems. These reports are retained for approximately 60 days and are not used for any other purpose.
Ticket photos (optional, off by default): a store's Admin can turn on a feature that keeps the picture the ticket scanner takes when a cashier scans a redemption ticket. When this setting is on, that picture (which may show the machine number, date, time, and amount printed on the ticket) is stored with the corresponding redemption record, in private storage that only that store's account can access. Ticket photos are business records of the store, are retained like the store's other records, and are never used by Coam Tracker for any other purpose. Stores that leave the setting off never store photos.
We use the information we collect to provide, operate, and maintain the Service, including your account, reports, and gift card features; to process payments and manage your subscription; to respond to product inquiries and demo requests; to send you service-related emails such as account confirmations, password reset links, and billing notices; to send you an optional daily business summary email, only if you turn it on in Settings and only to the address you choose (you can turn it off at any time); to detect, prevent, and address technical issues, fraud, or misuse of the Service; and to communicate with you about the Service, including updates to these policies.
We do not sell your personal information, and we do not use your business or transaction data to market to your customers.
What we look at. To run, secure, bill, and support the Service, our administrative tools show us account-level information about each store: plan and renewal status, when the account was last used, how many redemptions and gift cards it has recorded, and the total number and combined balance of gift cards still outstanding. Those tools do not list your customers, your individual gift cards, or your individual transactions. We access the underlying records only when needed to provide or support the Service at your request, to investigate misuse or a security incident, to meet a legal obligation, or to honor outstanding gift cards during a wind-down.
We rely on a small number of trusted third-party providers to operate the Service, including Stripe (payment processing — they receive your payment details directly; we never receive or store your full card number), Supabase (database hosting and backend infrastructure), Resend (email delivery for account and billing notifications), and Cloudflare (web hosting and content delivery). Each is contractually or by policy restricted from using your information for any purpose other than providing services to us.
Your redemption and gift card records are your records; we store them for you. We do not send them to the Georgia Lottery Corporation, any regulator, or law enforcement on our own, and we do not share store-level data between stores. If we receive a subpoena, court order, or other lawful request from a regulator or law enforcement for records relating to your store, we will comply only to the extent the law requires, will limit what we produce to what is requested, and will notify you before or promptly after producing records unless the law or the request prohibits notice. You may produce your own records to a regulator at any time using the export and report features in the Service; we recommend you do so yourself when asked, rather than directing the regulator to us.
We use reasonable administrative and technical safeguards to protect your information, including encrypted connections (HTTPS), password hashing, PIN hashing, and database-level access controls that restrict each account to its own data. The Service uses a multi-tenant design: customer data is stored in a single shared database, and row-level security rules enforced at the database layer ensure each store's account can see only its own data. Gift card codes are masked throughout the Service's lists and reports after issuance, and personalized demo links and customer wallets use random, non-guessable tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident that compromises your personal information, we will investigate promptly and notify affected customers without unreasonable delay, as and to the extent required by applicable law.
You own the business and transaction data you enter into the Service, including data entered during a free trial. You may export your data at any time using the Service's built-in backup and export features. If you use a free trial and then subscribe, the Service offers you a one-time choice to keep your trial-period records or begin with a clean ledger; if you choose a clean ledger, the trial-period records are moved into a sealed archive that only Coam Tracker can access, are retained there for as long as applicable record-keeping laws require, are used for no other purpose, and are then deleted.
Voided transactions are retained, rather than permanently deleted, for audit-trail purposes consistent with recordkeeping practices for regulated activity such as lottery and gift card redemptions; voided records are excluded from your reports and totals but remain visible to you in the Service's Voided Records view.
If you cancel your account, your account enters a limited free mode in which your records remain available to you read-only and previously issued gift cards can still be redeemed. We retain your data so long as your account exists, subject to standard backup retention cycles and any legal obligation to retain records longer. Because redemption records may be subject to state record-keeping requirements for regulated activity, transaction records are kept in an immutable form for as long as applicable record-keeping laws require: they can be voided with an audit trail but cannot be edited or erased through the Service.
You may permanently delete your account yourself, at any time, from Settings inside the app. You do not need to contact us and no approval is required. Before anything is deleted, the app offers you a download of your records and directs you to cancel billing; deletion then requires your password and a typed confirmation. When a deletion completes, the account's login and all of its business data — transactions, gift cards and their history, machine report entries, daily reconciliation records, staff records, and backups — are permanently erased from our active systems within 30 days, including from routine backups as those backups age out on their normal cycle. The exception is records the law requires us to keep: Georgia rules require COAM ticket redemption records to be retained for at least five years from the transaction date, so those are kept for that period — detached from your closed account and used for no other purpose — and then deleted. Deletion cannot be undone by you or by us. We may decline or defer deletion of records we reasonably believe you or we are legally required to retain, and we will tell you if that is the case. If you cannot sign in — for example, you have lost your password — you can instead ask us to delete the account by emailing [email protected] or calling (404) 992-8675, and we will verify who you are before acting.
If gift cards are still outstanding when you delete. Gift cards your store has issued or sold are a promise to the person holding them, and deleting your account does not cancel that promise. If any card still carries an unredeemed balance when you delete, your account does not close right away: it enters a wind-down in which redeeming those existing cards is the only function that still works, and we keep the account's records for exactly that purpose and no other. Those cards do not expire, and we do not delete them on a timer. When the last balance reaches zero the account and its data are deleted automatically. We keep this data because it is the minimum needed to honor an obligation your store owes to its customers; we do not use it for anything else.
Selling your business. Accounts are not transferable, and you should never share your login with a buyer — doing so would give them your full transaction history, your gift card records, and the names of the staff members you entered. A buyer opens their own account. We treat whoever holds your account credentials as authorized on the account, which is why keeping them to yourself matters.
You can access, update, or export most of your account and business data directly within the Service, and you can permanently delete your account yourself from Settings inside the app, as described in Section 5 (or ask us to do it if you cannot sign in). You can also unsubscribe from non-essential emails; you will still receive essential account and billing emails while your subscription is active.
The Service uses browser local storage and similar technologies to keep you signed in, remember your preferences (such as theme), and support offline functionality. The customer wallet page stores its secret wallet token in the customer's own browser storage, and our website stores a small "already counted today" marker so a visitor is not counted twice in one day, plus a marker for the current browsing session that remembers where the visit came from so we do not count the same visit as arriving from two places. We do not use third-party advertising cookies.
The Service is intended for business use by adults operating a retail store and is not directed to children under 18. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. Material changes will be communicated to you, such as by email or in-app notice. The "Effective Date" above reflects the latest revision.
Questions about this Privacy Policy may be directed to: [email protected].
© 2026 Coam Tracker, LLC. All rights reserved. "Coam Tracker"™ and the Coam Tracker logo are trademarks of Coam Tracker, LLC.