This policy applies to employees/agents who use the BzTrack app, managers and administrators who access workforce data, and organization owners who subscribe to our service.
| Data Type | Details |
|---|---|
| Account Info | Name, email, phone, role, profile photo |
| Location (GPS) | Coordinates during shift hours only, route history, client proximity |
| Work Activity | Tasks, visits, expenses, attendance, customer feedback |
| Device Info | Platform (iOS/Android), battery level |
| Media | Photos (EXIF metadata stripped before storage), documents, signatures |
Important: Location data is collected only during your configured shift hours on configured work days. We do not track your location outside of work hours.
Before any location data is collected, you will be shown a Location Tracking Consent screen that clearly explains what data is collected, when, and by whom. You must tap "I Agree" to proceed. Consent is recorded with a timestamp.
You may withdraw your consent at any time by contacting your organization administrator or emailing us at support@bztrack.com.
Your data is visible to:
We do NOT share your data with other organizations, third-party advertisers, data brokers, or any entity outside your organization.
| Data Type | Retention Period |
|---|---|
| GPS location points | 90 days, then auto-deleted |
| Route history | 90 days, then auto-deleted |
| Visit records | 1 year |
| Task records | 1 year |
| Account data | Until account is deleted |
| HR documents | Until deleted by user or admin |
We will respond to all data requests within 30 days.
BzTrack is committed to storing your data in India wherever technically possible. Our data architecture:
| Data Category | Location |
|---|---|
| All business records (users, tasks, visits, expenses, attendance, audit logs) | India — Google Cloud Mumbai (asia-south1) |
| Files — photos, signatures, receipts, HR documents | India — Google Cloud Mumbai (asia-south1) |
| Backend compute — all Cloud Functions | India — Google Cloud Mumbai (asia-south1) |
| Real-time presence cache (current location of active agents, online/offline status) | Google Cloud Singapore (asia-southeast1) |
| Authentication (login credentials, session tokens) | Google Cloud Identity — globally distributed per Google's infrastructure standards |
| Push notification delivery | Firebase Cloud Messaging — Google global network |
About the Singapore cache: BzTrack uses a short-lived real-time cache in Google Cloud's Singapore region for live agent presence and current GPS coordinates. This data is transient (current-state only) and is not used for historical storage. All permanent records — route history, visit logs, task data — reside in Mumbai, India. Google Cloud does not currently offer an Indian region for this specific real-time service.
Lawful basis for cross-border processing: Data transfer to Singapore is permitted under Section 16 of the Digital Personal Data Protection Act, 2023, as Singapore is not on the Central Government's restricted-countries list.
For customers requiring strict India-only data residency: BzTrack can provision a dedicated deployment with all data (including real-time presence) hosted entirely in India-based infrastructure. Contact us at support@bztrack.com to discuss requirements.
In the event of a personal data breach, we will notify the Data Protection Board of India within 72 hours and notify affected users via email and in-app notification.
BzTrack is a workplace tool intended for adults (18+). We do not knowingly collect data from anyone under the age of 18.
Email: support@bztrack.com
Website: bztrack.com
For privacy concerns or data requests, use the Help & Feedback section in the app, or email us directly.