Privacy Policy - BackTrack

1. Introduction

Welcome to BackTrack ("we," "our," or "us"). BackTrack is an application that connects to your Gmail account to identify emails related to purchases, returns, and refunds, and displays that information on a personalized dashboard.

We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data. By using BackTrack, you agree to the practices described in this policy.

2. Information We Collect

2.1 Gmail Data (via Google OAuth)

To provide our service, BackTrack requests read-only access to your Gmail account through Google's OAuth authentication system. This means we can only read emails — we cannot send, modify, delete, or otherwise alter any messages in your inbox.

We scan your inbox to identify emails that relate to:

Online purchases and order confirmations
Return requests and return status updates
Refund confirmations and refund status updates

We do not read, store, or process any emails unrelated to returns or refunds.

2.2 Parsed Return and Refund Data

From eligible emails, we extract and store the following structured data:

Retailer or merchant name
Order or return reference numbers
Item description(s) related to the return
Return initiation and expected completion dates
Refund amounts and refund status
Associated email timestamps

This parsed data is stored in your BackTrack account to power your dashboard and provide you with a persistent history of your returns and refunds.

2.3 Account Information

When you create a BackTrack account, we collect:

Your name
Your email address (used as your account identifier)
Authentication tokens required to maintain your connection to Gmail

2.4 Usage Data

We may collect standard technical data about how you interact with our app, including:

Device type, operating system, and browser type
IP address
Pages or features accessed within BackTrack
Date and time of access

This data is used solely for improving app performance, diagnosing errors, and ensuring security.

3. How We Use Your Information

We use the information we collect to:

Provide the core service: Scan your Gmail for return and refund-related emails and display them on your dashboard.
Maintain your account: Store parsed return data so your history persists between sessions.
Improve the product: Analyze aggregated, anonymized usage patterns to enhance features and fix bugs.
Communicate with you: Send service-related notifications (e.g., alerts about new refunds detected), account updates, or responses to your support inquiries.
Ensure security: Detect and prevent unauthorized access, fraud, or abuse.

We do not use your Gmail data to serve advertisements, build marketing profiles, or sell your information to third parties.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

4.1 Service Providers

We may share data with trusted third-party vendors who assist us in operating BackTrack (e.g., cloud hosting, analytics, or customer support tools). These providers are contractually required to handle your data securely and only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or government request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email or prominent notice within the app before your data becomes subject to a different privacy policy.

5. Google API Services — Limited Use Disclosure

BackTrack's use of data received from Google APIs, including Gmail, adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only request Gmail access scopes necessary to identify return and refund-related emails.
We do not use Google user data to develop, improve, or train generalized AI or machine learning models.
We do not transfer your Gmail data to third parties except as necessary to provide or improve our service, as required by law, or with your explicit consent.
We do not use Gmail data for advertising purposes.

6. Data Retention

We retain parsed return and refund data for as long as your BackTrack account is active. If you delete your account, we will delete your stored return data and revoke Gmail access within 30 days, unless we are required to retain it for legal or compliance purposes.

Raw email content is never stored — only the structured data extracted from return and refund emails.

7. Data Security

We implement industry-standard security measures to protect your information, including:

Encrypted data transmission (TLS/HTTPS)
Encrypted storage of OAuth tokens and account data
Access controls limiting which personnel can access user data
Regular security reviews and vulnerability assessments

No method of transmission over the internet is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security.

8. Your Rights and Choices

8.1 Access and Correction

You may access or update your account information at any time through your BackTrack account settings.

8.2 Revoke Gmail Access

You can revoke BackTrack's access to your Gmail account at any time through your Google Account permissions page. Revoking access will prevent BackTrack from scanning new emails, but previously parsed return data may remain in your account until you delete it.

8.3 Delete Your Account

You may request deletion of your BackTrack account and all associated data by contacting us at the email address below. We will process deletion requests within 30 days.

8.4 Opt Out of Communications

You may opt out of non-essential communications (such as product updates or marketing emails) by clicking "unsubscribe" in any such email or adjusting your notification preferences in the app. We will still send transactional messages related to your account.

9. California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

Right to Know: You have the right to request details about the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purpose for collecting it, and any third parties with whom we share it.
Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Opt Out of Sale: We do not sell personal information. No opt-out is required.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your rights, please contact us at the address below. We will respond to verifiable requests within 45 days.

10. Children's Privacy

BackTrack is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete it promptly. If you believe a child has submitted information to us, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we will notify you by email or through a prominent notice within the app at least 30 days before the changes take effect. Your continued use of BackTrack after changes become effective constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

BackTrack

Email: support@getbacktrack.co