Who we are
ProTrack (protrack.xyz and app.protrack.xyz) is operated by ProTrack.xyz, based in Tamil Nadu, India. In this policy “we” means ProTrack and “you” means the person using it. For anything about your data, write to [email protected].
This policy is written for India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
Two kinds of people use ProTrack
Shop owners sign in and run their shop on ProTrack. For their account, we decide how the data is used and this policy applies directly.
Their customers appear in ProTrack when a shop bills them, when they order from a shop's online store, or when they take a queue token. That data belongs to the shop. The shop decides what to collect and why, and we store and process it only to run the shop's ProTrack for them. If you are a customer, ask the shop first; you can also write to us and we will help.
What we collect
When you sign in
Your name, email address, profile picture and Google account ID, from Google Sign-In. We never see your Google password.
What you enter for your shop
- Shop details: name, address, phone, GSTIN, UPI ID, tax settings, logo, banner and store settings.
- Records: products, prices and their history, stock movements, invoices, payments, customers, dues and expenses.
From the shop's customers
- Online store orders: name, phone number, delivery address if they choose delivery, and any note.
- Queue tokens: the name and phone number the customer gives, if any.
- Invoices: the customer name and phone the shop adds.
Technical data
- A sign-in cookie that keeps you logged in (see Cookies below).
- Cloudflare Turnstile checks on the store checkout and queue pages, to stop bots. Cloudflare processes your IP address and browser signals for this.
- Standard server logs (IP address, browser, time, page requested, errors), kept by our hosting provider for security and fixing faults.
What we do not collect: card numbers or bank details. UPI payments go straight from the customer's UPI app to the shop's UPI ID; ProTrack only shows the QR and never touches the money.
Why we use it
- To run the service you asked for: billing, stock, invoices, the online store, queue tokens and reports.
- To keep accounts secure and stop abuse.
- To answer you when you write to us.
- To meet legal obligations.
We do not sell personal data, show ads, or use it to build advertising profiles. We use no third-party analytics or tracking cookies.
Where it is stored and who sees it
Your data is stored with the providers below. They process it on our behalf and under their own security and privacy terms. Their servers may be outside India.
- Cloudflare hosts the app, its database and uploaded images, runs the bot checks and keeps server logs.
- Google handles sign-in.
Some things happen only when you choose them, on your own device:
- Sending a bill, reminder or store link on WhatsApp opens WhatsApp with the message ready. WhatsApp's own policy applies from there.
- Printing goes from your device to your printer, or through the RawBT app if you use it.
We disclose data to authorities only when the law requires it, and we will tell you if we are allowed to.
Cookies and storage on your device
- Session cookie: keeps you signed in for 30 days, renewed while you use the app. The server stores only a hash of it.
- Sign-in cookie: lasts 10 minutes, only while you sign in with Google.
- Local storage: settings such as your language and printer choice stay in your browser on that device.
These are all needed for the app to work. There are no advertising or analytics cookies.
How long we keep it
- Your shop's data: for as long as your account is open.
- Queue tokens: deleted automatically after 30 days.
- Expired sign-in sessions: deleted every day.
- If you ask us to delete your account, we delete your account and shop data within 30 days, except anything the law requires us to keep.
Tax law may require you to keep your invoices for several years. Download or print what you need before you ask us to delete your account.
Your rights
You can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct or complete it;
- delete it, and close your account;
- withdraw consent where we rely on it (for example, by stopping use and deleting your account);
- name someone to act for you if you die or cannot act yourself.
Write to [email protected]. We will reply within 30 days. If you are not happy with our answer, you can complain to the Data Protection Board of India.
Security
Everything travels over HTTPS. Session tokens are stored only as hashes, every request is checked against the signed-in shop, and bills are recalculated on the server. No system is perfectly secure, but if we learn of a breach that affects your data, we will tell you and the authorities as the law requires.
Children
ProTrack is for shop owners aged 18 or over. We do not knowingly collect data from children.
Changes and contact
If we change this policy we will update the date at the top, and for significant changes we will let you know before they take effect.
Grievance Officer: ProTrack.xyz, Tamil Nadu, India. Email [email protected]. We aim to acknowledge complaints within 24 hours and resolve them within 15 days.