Privacy Policy — BzTrack

1. Who This Policy Applies To

This policy applies to employees/agents who use the BzTrack app, managers and administrators who access workforce data, and organization owners who subscribe to our service.

2. Data We Collect

Data Type	Details
Account Info	Name, email, phone, role, profile photo
Location (GPS)	Coordinates during shift hours only, route history, client proximity
Work Activity	Tasks, visits, expenses, attendance, customer feedback
Device Info	Platform (iOS/Android), battery level
Media	Photos (EXIF metadata stripped before storage), documents, signatures

Important: Location data is collected only during your configured shift hours on configured work days. We do not track your location outside of work hours.

3. Purpose of Collection

GPS location — route tracking, visit verification, mileage calculation
Account info — authentication, role-based access control
Work activity — task management, performance tracking, payroll
Photos — proof of visit, task completion verification
Device info — push notifications, battery-aware GPS optimization

4. Consent

Before any location data is collected, you will be shown a Location Tracking Consent screen that clearly explains what data is collected, when, and by whom. You must tap "I Agree" to proceed. Consent is recorded with a timestamp.

You may withdraw your consent at any time by contacting your organization administrator or emailing us at support@bztrack.com.

5. Data Sharing

Your data is visible to:

You — via "My Route," "My History," and profile screens
Your Manager/Team Lead — live location during shift, visit history, task progress
Organization Admin — all workforce data for their organization

We do NOT share your data with other organizations, third-party advertisers, data brokers, or any entity outside your organization.

6. Data Retention

Data Type	Retention Period
GPS location points	90 days, then auto-deleted
Route history	90 days, then auto-deleted
Visit records	1 year
Task records	1 year
Account data	Until account is deleted
HR documents	Until deleted by user or admin

7. Your Rights

Right to Access — view your data via "My Route," profile, and history screens in the app
Right to Correction — edit your profile information directly in the app
Right to Erasure — request deletion via your organization admin or email us
Right to Grievance Redressal — submit a complaint via the Help & Feedback section

We will respond to all data requests within 30 days.

8. Data Security

Encryption in transit (HTTPS/TLS 1.3) and at rest
Role-based access control (6-tier hierarchy)
EXIF metadata stripping on all uploaded photos
Per-user storage quotas (200 MB)
Firestore security rules with server-enforced access control
Data stored in India (Google Cloud Mumbai region)

9. Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India within 72 hours and notify affected users via email and in-app notification.

10. Children's Data

BzTrack is a workplace tool intended for adults (18+). We do not knowingly collect data from anyone under the age of 18.

11. Contact Us

Email: support@bztrack.com

Website: bztrack.com

For privacy concerns or data requests, use the Help & Feedback section in the app, or email us directly.