1. Who we are
Tractzo (“we”, “us”, “our”) is a software-as-a-service platform that helps Indian service businesses — salons, gyms, spas, car washes, and more — manage staff, track revenue, and accept online bookings. Tractzo is operated as a sole-proprietorship / startup from India.
For any privacy-related queries, write to us at tractzosupport@gmail.com.
2. What data we collect
We collect data in two contexts:
Business owners (registered accounts)
- Name, email address, phone number
- Business name, type, address, and city
- Staff details you add (name, phone, commission rate)
- Services, pricing, and working-hours settings
- Revenue and commission records you enter or that are auto-generated from bookings
- Payment details are handled entirely by Razorpay — we do not store card numbers or UPI IDs
End customers (booking customers)
- Name and mobile number submitted in the booking form
- Service selected, appointment date and time
- Optional notes you provide during booking
We do not collect sensitive personal data such as financial account credentials, biometric data, health information, or government ID numbers.
3. How we use your data
- To operate your Tractzo account and provide the service
- To display your booking page to your customers
- To send WhatsApp appointment confirmations and reminders (via Twilio) when enabled
- To process subscription payments via Razorpay
- To generate revenue, commission, and attendance reports
- To send product updates or important notices to your registered email (you can unsubscribe anytime)
We do not sell your data. We do not use it for advertising.
4. Third-party services we use
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database & authentication | All account and booking data |
| Twilio | WhatsApp message delivery | Customer name, phone, appointment details |
| Razorpay | Subscription billing | Business name, email, payment info |
| Vercel | App hosting & CDN | IP address, request logs (standard server logs) |
Each provider has their own privacy policy. We encourage you to review them.
5. Data retention
- Account data is retained while your account is active.
- If you delete your account, we delete your business data within 30 days, except where retention is required by law.
- Booking records may be retained for up to 3 years for tax and audit purposes.
- WhatsApp message logs are retained for 90 days for debugging purposes, then deleted.
6. Your rights (DPDPA 2023)
Under India's Digital Personal Data Protection Act 2023, you have the right to:
- Access — request a copy of data we hold about you
- Correction — correct inaccurate or incomplete data
- Erasure — request deletion of your personal data (subject to legal retention obligations)
- Grievance redressal — raise a complaint about how your data is handled
To exercise any of these rights, email tractzosupport@gmail.com with the subject “Data Request”. We respond within 7 business days.
7. Security
We use industry-standard security practices: all data is encrypted in transit (HTTPS/TLS), database access is protected by Supabase's Row Level Security policies, and API access requires authentication. We do not store passwords — authentication is handled by Supabase Auth. Payments are processed by Razorpay and we do not store payment credentials.
Despite our best efforts, no system is 100% secure. If you discover a security vulnerability, please report it to tractzosupport@gmail.com.
8. Cookies
Tractzo uses a single first-party session cookie set by Supabase Auth to keep you logged in. We do not use advertising cookies or third-party tracking cookies.
9. Changes to this policy
If we make material changes to this privacy policy, we will notify registered business owners by email at least 7 days before the change takes effect. The “last updated” date at the top reflects the current version.
Questions about your privacy?
Email us at tractzosupport@gmail.com — we typically respond within 1 business day.