How it works Features Pricing Contact Login
Draft — AI-generated starting point. Have a lawyer review this before treating it as final and binding. A few [bracketed] placeholders remain — fill these in with your real details before publishing.

Privacy Policy

Last updated: [DATE]

1. Who we are

TraqZo ("we", "us", "our") is a server-side conversion tracking service operated by [YOUR LEGAL BUSINESS NAME], based in Bangladesh. This Privacy Policy explains what data we collect, why, and how it's handled when you use our platform (the "Service") as a customer, or when your website visitors interact with a website that has our tracking snippet installed.

If you have questions about this policy, contact us at support@traqzo.com.

2. Data we collect from you (our customer)

When you sign up and use TraqZo, we collect:

  • Account information: name, email address, password (stored hashed, never in plain text)
  • Two-factor authentication data, if you enable it (a secret key, stored encrypted)
  • Site and domain information you add to your account
  • Ad platform credentials you connect (pixel IDs, access tokens/API keys) — these are stored encrypted and never displayed in full after you save them
  • Payment submission details when you upgrade a plan: transaction ID, amount, and the payment method you used (mobile banking or bank transfer) — we do not collect or store your mobile banking PIN or full bank account credentials; you only provide a reference/transaction ID to us
  • Support communications you send us

3. Data we collect on behalf of your website visitors

When your website visitors interact with a site that has our tracking snippet installed, we collect, on your behalf, as your data processor:

  • Page views and custom events you configure (e.g. Add to Cart, Purchase)
  • The visitor's IP address and browser user-agent
  • A session identifier generated by our snippet
  • If your website collects it and passes it to us: hashed (SHA-256) email address and phone number — we never store or transmit these in plain, readable form
  • If a visitor submits a lead/contact form you've configured us to capture: their name, email, and phone number, stored so you can access and act on your own leads

We process this visitor data solely to provide the Service to you (deduplicating events, detecting fraudulent/bot traffic, and forwarding conversion data to the ad platforms you've connected). We do not sell this data, and we do not use it for our own advertising or any purpose beyond operating the Service for you.

4. Where this data goes

Based on the ad platform connections you configure, event data (including hashed identifiers where applicable) is forwarded to:

  • Google (Google Analytics 4, Google Ads)
  • Meta (Facebook/Instagram)
  • TikTok
  • Snapchat
  • Pinterest

Each of these platforms has its own privacy policy and terms governing how they use the data once received. We encourage you to review theirs as well, since you are the one who decides which platforms to connect.

5. Your responsibilities as our customer

You are responsible for:

  • Having a lawful basis and, where required by law (such as GDPR in the EU/UK), appropriate visitor consent before collecting and transmitting personal data through our Service
  • Maintaining your own privacy policy on your website disclosing your use of tracking tools like TraqZo
  • Only connecting ad platform accounts you're authorized to use
  • The accuracy of any data you submit to us, including payment submissions

6. Data retention

We retain event and session data for [X months/years — decide your retention period] to provide reporting, fraud detection, and funnel analytics. You can request deletion of visitor data associated with a specific email or phone number at any time through your dashboard's Data & Privacy tool, or by contacting us directly. Account data is retained as long as your account is active, and deleted or anonymized within [X days] of account closure upon request.

7. Security

We encrypt sensitive data at rest (ad platform credentials, payment tokens where applicable) and use hashing for personally identifiable information before it is stored or forwarded, wherever technically possible. No system is 100% secure, and we cannot guarantee absolute security, but we take reasonable, industry-standard measures to protect data in our care.

8. Cookies and local storage

Our tracking snippet uses your visitors' browser's local storage to maintain a session identifier for up to 30 minutes of inactivity. This is used solely for deduplication and session-based analytics, not for cross-site advertising by us.

9. Children's privacy

Our Service is not directed at children under 13 (or the relevant age of digital consent in your jurisdiction), and we do not knowingly collect data from them.

10. Your rights

Depending on your jurisdiction, you (or your website visitors, through you as the data controller) may have rights to access, correct, delete, or restrict processing of personal data. We provide tooling to support these requests — see Section 6.

11. Changes to this policy

We may update this policy from time to time. We'll notify customers of material changes via email or an in-app notice.

12. Contact

[YOUR LEGAL BUSINESS NAME]
[YOUR ADDRESS]
support@traqzo.com