Privacy Policy

This policy explains what personal data TrackSite360 (run by TrackSite360) handles, why, and the choices you have.

1. Two kinds of data, two roles

• Account data — the names, emails, phone numbers and activity of the builder's team who use the Service. For this we are the Data Fiduciary.
• Customer data — leads, buyers and their bookings, which builders enter, import or receive from Meta ads and WhatsApp. The builder is the Data Fiduciary; we process it only to run the Service for them. Requests about this data should go to the builder first.

2. What we collect

• Account: name, email, mobile number, role, password (stored only as a one-way hash), language and theme.
• Customer records: contact details, property requirements, follow-ups, site visits, bookings and payments, and identity numbers the builder records for an agreement (Aadhaar is shown only as its last 4 digits).
• Messages exchanged with customers through WhatsApp, Instagram and Facebook, if the builder connects them.
• Technical data: IP address and timestamps for security and rate-limiting, and an activity log of changes.
• One sign-in cookie (needed to keep you signed in). No advertising or tracking cookies.

3. Why we use it

• To provide the Service: store records, send the reminders and messages the builder sets up, produce reports.
• To keep it secure: sign-in checks, abuse prevention, the activity log, backups.
• To support and bill the builder.

We do not sell personal data or use customer data for our own marketing.

4. Who else processes it

• Hosting and storage in India-region cloud servers (AWS).
• Meta (WhatsApp, Facebook, Instagram) — only for the builder's own connected accounts.
• An email provider, to send password-reset and account emails.

5. How long we keep it

• While the builder's account is active. Deleted leads stay in Trash until the builder empties or restores them.
• After account closure: deleted within 30 days, and from backups as they roll over (within 14 days), unless the law requires longer.

6. Security

Encrypted connections, hashed passwords, per-builder data separation, role-based access, limited staff access, and regular backups. No system is perfectly secure; if a breach affects your data we will inform the builder and the Data Protection Board as the law requires.

7. Your rights

You may ask to access, correct or erase your personal data, withdraw consent, or nominate someone to act for you. Write to the builder you dealt with, or to us at support@tracksite360.com. We reply within 30 days.

8. Grievance Officer

Grievance Officer, TrackSite360 — support@tracksite360.com, Ahmedabad, Gujarat, India. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

9. Changes

We will post updates here and tell builders of material changes before they apply.