Privacy & Data Protection

Privacy Policy

Your trust is our highest priority. This Privacy Policy details how BizTracking collects, handles, stores, and safeguards merchant and customer data across our platform.

Last updated: October 9, 2026•GDPR & CCPA Compliant

Never Sold

We never sell, rent, or monetize your store data, customer lists, or catalog assets to any third party.

No AI Training

Your proprietary store data is never used to train public foundation models or shared with other merchants.

Full Ownership

You retain complete ownership of all data. Export or delete your entire workspace at any time.

1Information We Collect

We collect information necessary to operate, optimize, and deliver the BizTracking marketing suite:

A. Merchant Account Information

When you register, we collect your name, business email address, encrypted password, store business name, and store URL. For billing, your payment details are tokenized and processed securely by Stripe / Razorpay (we do not store raw credit card numbers on our servers).

B. Connected Store Data (Shopify, WooCommerce, WordPress)

When you authorize an integration, we synchronize product titles, descriptions, categories, pricing, and published blog posts to enable automated SEO auditing, content generation, and catalog-aware chatbot answers.

C. Attribution & Analytics Telemetry

Our lightweight first-party script (tracker.js) sets an anonymous, first-party cookie (_bt_vid) on your domain to attribute order revenue to marketing campaigns, UTM parameters, and referral channels. No cross-site third-party tracking or behavioral ad profiling is performed.

D. Custom Domain Email & Mailbox Telemetry

For custom sending domains, we process sender email addresses, DKIM keys, SPF/DMARC DNS records, and delivery receipts (bounces, delivered status, open rates) to ensure email deliverability.

2How We Use Your Information

We strictly utilize the collected data to provide and enhance our marketing services, including:

  • Running technical SEO crawler audits and calculating site health metrics.
  • Generating customized marketing copy, blog posts, and review responses tailored to your store niche.
  • Processing campaign dispatches and tracking closed-loop revenue attribution.
  • Managing billing, plan quotas, credit balances, and subscription renewals.
  • Preventing abuse, malicious activities, email spam, and security vulnerabilities.

3Artificial Intelligence & Model Privacy

Strict AI Data Isolation Guarantee:

When our agents generate content or analyze your catalog, requests are sent via enterprise-grade, zero-data-retention API agreements. Your inputs, product catalogs, and confidential business metrics are never used to train public foundation models. Each store operates inside its own isolated organizational perimeter.

4Third-Party Service Providers (Subprocessors)

We work only with vetted, enterprise-grade subprocessors to operate core infrastructure under strict data protection agreements:

  • Payment Processors: Stripe / Razorpay (PCI-DSS Level 1 certified billing infrastructure).
  • Cloud Hosting & Databases: AWS / Railway / Supabase (Encrypted PostgreSQL database and object storage).
  • Mail Infrastructure: Stalwart Mail Server & transactional SMTP nodes (authenticated with 2048-bit DKIM encryption).
  • Security & DNS: Cloudflare (DDoS mitigation, CDN delivery, SSL/TLS certificates).

5Data Security Measures

We implement robust security controls designed to safeguard your business information:

  • All data in transit is encrypted using modern TLS 1.3 encryption.
  • Sensitive integration secrets (API keys, mailbox credentials, OAuth tokens) are encrypted at rest using AES-256 GCM encryption.
  • Role-based access controls and least-privilege principles are enforced across internal development systems.
  • Continuous vulnerability assessments and automated dependency patching.

6Your Rights & Data Portability (GDPR & CCPA)

Regardless of where your business is based, we afford all merchants full control over their data:

  • Right to Access & Export: You can export all your reviews, campaign analytics, and SEO reports in JSON or CSV format.
  • Right to Rectification: You can update or modify your store configurations directly in your dashboard settings.
  • Right to Erasure (Right to be Forgotten): Upon account deletion, all store catalogs, generated content, and mailbox credentials are permanently purged from active production databases within 30 days.

7Privacy Inquiries & Data Protection Contact

If you have questions regarding this Privacy Policy, wish to exercise your data subject rights, or require a signed Data Processing Addendum (DPA), please contact:

BizTracking Privacy & Compliance Office

BizTracking Inc.

privacy@biztracking.in • contact@biztracking.in