Privacy Policy

1. About this policy

xTrac AI is an AI-powered seller agent platform operated by iEllipse Technologies (referred to as iEllipse, we, us, or our), a partnership firm registered in India at #26 KHB Colony HIG I Group II Hootagalli, Mysuru, Karnataka 570018. xTrac AI is offered to e-commerce sellers through xtrac.app and through app marketplaces including the Shopify App Store and the Amazon Selling Partner Appstore, and it connects to channels such as Meta (WhatsApp Business & Instagram), Google Workspace, and other seller platforms.

This privacy policy explains how iEllipse collects, uses, retains, and protects data when sellers connect their accounts and use xTrac AI agents.

This policy supplements (and where applicable supersedes) any prior privacy notices for non-xTrac products of iEllipse Technologies.

2. Information we collect

From sellers using xTrac AI

When a seller signs up at xtrac.app we collect:

• Account identifiers: email address, organisation name, role, login timestamps
• Contact details: name, phone number (optional), business address
• Communication preferences and product usage telemetry (clicks, agent invocations, error events)

From the Amazon Selling Partner API (SP-API)

When a seller authorises xTrac AI to access their Amazon Seller Central account, we receive and process the following categories of data through the SP-API:

• Order metadata: order ID, line items, shipping city and state, order status, refund status
• Inventory data: SKU-level stock levels across FBA, MFN, and seller warehouses
• Listing data: product titles, descriptions, images, ASIN-level metadata
• Buyer-Seller Messaging content: only when the seller has enabled the customer support agent

We do not access individual buyer payment details, individual customer login credentials, or any data outside the SP-API scopes the seller has explicitly authorised.

From the Amazon Advertising API (Ads API)

When a seller authorises xTrac AI to access their Amazon Advertising account, we receive and process:

• Advertising profiles, campaign IDs, ad group IDs, keywords, bids, budgets
• Sponsored Products, Sponsored Brands, and Sponsored Display performance reports
• Search term reports and ad placement reports for campaign optimisation

From Shopify (Admin API)

When a seller connects their Shopify store to xTrac AI (via the Shopify App Store or from within xTrac), we receive and process the following through Shopify's official Admin API, limited to the scopes the seller grants at install:

• Store & product data: shop profile, product catalogue, variants, inventory levels, and pricing
• Order data: order IDs, line items, fulfilment and financial status, and totals
• Customer records (Protected Customer Data): name, email, phone, and addresses the seller has stored on Shopify — used only to answer the seller's questions and power the customer-support/ops agents, never sold or shared with third parties
• Shopify Inbox messages, only when the seller has enabled the customer-support agent

With the seller's explicit approval, xTrac AI can also write back to Shopify on the seller's behalf — updating orders, products, and inventory levels, and creating fulfilments. Every write is proposed to the seller and executed only after they confirm it; xTrac never modifies store data autonomously. We do not access individual buyer payment-card details, payouts, bank accounts, or themes.

We access only the scopes the seller authorises at install. A seller can revoke access at any time from Shopify admin → Apps → uninstall xTrac AI, which immediately invalidates our access token.

From LinkedIn

When a workspace connects LinkedIn, xTrac AI uses only LinkedIn's official APIs and only the permissions shown on LinkedIn's own consent screen.

• Your LinkedIn profile: your LinkedIn member ID, name and profile photo, used to show who is connected and to publish as you. We do not request your email address, and we cannot read your LinkedIn messages, connections, feed or anyone else's profile.
• Posts: your AI agent can draft posts for your profile (text, a link, or one image from your xTrac Library). Nothing is published until the person whose LinkedIn profile it is approves it — no one else in the workspace can approve it for them — and an image is sent to LinkedIn only at that moment. The first time they approve, they confirm with LinkedIn that the profile is theirs (LinkedIn asks them to sign in if they aren't already signed in). We use that confirmation to remember which xTrac account they use, and it refreshes the LinkedIn connection the same way reconnecting does.
• LinkedIn Pages (when available): if you connect a company Page, xTrac also receives the Page's name and logo, comments on and mentions of the Page's posts, and the commenter's name, headline and photo — used only to show them to the people who manage that Page in xTrac and to draft or send the Page's replies.

LinkedIn member data is shown only to people associated with the connected profile or Page. It is never sold, exported, combined with other data, added to leads, customer records or audiences, kept in your AI agent's long-term memory, or used for advertising, sales or recruiting.

You can disconnect LinkedIn at any time from Integrations in xTrac, or remove xTrac AI in your LinkedIn settings under Data privacy → Permitted services, which revokes our access immediately.

From Practo Ray

A clinic can sync its Practo Ray appointments into xTrac AI so that the clinic's own AI assistant can answer scheduling questions about them. xTrac has no server-side access to Practo, so the sync runs through a small xTrac browser extension the clinic installs in its own logged-in Practo Ray tab; xTrac never holds the clinic's Practo password or session, and never signs in to Practo on the clinic's behalf.

• What xTrac receives: from the clinic's own Practo Ray account — each appointment's date and time, status, and the doctor, together with the patient's name and mobile number and the clinic's own patient reference number. xTrac reads no other patient record, no clinical notes, and no billing or payment details.
• Where it comes from: the clinic's own browser, which is already signed in to Practo Ray, reads the appointments and sends them to the clinic's xTrac workspace over a signed, workspace-scoped token. No data flows through Practo to xTrac by any other route.

The clinic is the data fiduciary for this patient information and xTrac AI is its processor: the clinic decides to connect Practo Ray, is responsible for informing its patients and for the lawful basis, and xTrac processes the data only on the clinic's instructions. The patients themselves are not xTrac users and do not consent within xTrac.

Appointments are stored encrypted, scoped to that one workspace, shown only to that clinic's own users and agents, and are never sold, exported, combined with other data, added to leads, customer records or audiences, kept in the AI agent's long-term memory, or used for advertising, sales or recruiting. xTrac holds only a rolling window of roughly the past 30 and next 30 days of appointments, refreshed on each sync.

On WhatsApp: if the clinic turns these on, its AI assistant can also answer on the clinic's WhatsApp number. A doctor the clinic has linked to their Practo calendar, whose own phone number has been confirmed with a one-time code, can get their own appointment list (times, patient names and status, never patients' phone numbers). A patient can ask about the appointments recorded under the WhatsApp number they are writing from and, where the clinic allows it, say which patient they mean when several share that number. A name alone never unlocks anyone's appointments.

Disconnecting Practo Ray from Integrations in xTrac permanently erases the synced appointments (not a recoverable soft-delete) and cancels the extension's token so no further appointments are stored. Appointment details the AI assistant has already quoted in a conversation remain in that conversation's history under the conversation-history retention below.

From other connected integrations

If a seller chooses to connect other channels, xTrac AI may also receive:

• WhatsApp Business: message content the seller has chosen to route through xTrac AI
• Instagram and Facebook Messenger: business inbox messages, comments where the seller has enabled the comment-reply agent
• Google Workspace: Gmail messages, Sheets data, Drive files, Calendar events, only with explicit per-scope consent
• Blinkit, Brand Central, and other marketplace connectors: order, inventory, and campaign data

3. Tracy personal assistant — messages on your own phone (Android)

Tracy is our personal assistant app. This section describes a feature of that app and applies only if you install Tracy and switch the feature on; it does not apply to the seller product described elsewhere in this policy.

• What it does. With your explicit permission, Tracy can read the message notifications that appear on your own Android phone, so it can summarise them, remind you about ones that need a reply, and — when you ask it to — reply for you.
• It is off unless you turn it on. You enable it in the Tracy app, and then grant “notification access” to Tracy in your phone’s own Settings. Android does not allow an app to grant itself this access, and there is no other way to enable it. You can withdraw it at any time from that same Settings screen, which stops all capture immediately; disconnecting the feature inside the Tracy app additionally erases the stored credential from the device.
• Which notifications. Only notifications from WhatsApp (com.whatsapp) and WhatsApp Business (com.whatsapp.w4b). Notifications from every other app on your phone are ignored and never leave the device.
• What is captured. The sender’s name (or the group name, and who spoke within it), the message text, and the time it arrived.
• These are other people’s words. The messages were written by people who are not our users and who did not agree to this policy. We process them only to provide the assistant to you. We do not use them to build profiles of the senders, we do not use them for advertising, we do not sell them, and we do not share them with third parties other than the infrastructure providers listed in this policy.
• How long we keep them. Captured messages are sent over an encrypted connection to your own account on our servers and are automatically deleted 7 days after they arrive. We do not keep an archive.
• Replies. If you ask Tracy to reply, it uses your phone’s own notification reply action, so WhatsApp sends the message from your account exactly as if you had typed it — we never send messages on your behalf from our servers. Every reply requires your explicit approval before it is sent. A reply that cannot be delivered within 30 minutes is discarded rather than sent late, and a reply is deleted together with the message it answers.
• Deleting it. You can erase everything captured from your phone at any time by disconnecting the feature, or by emailing support@xtrac.app. The rights in the “Your rights” section below apply to this data in full.

4. How we use this data

We process seller data only to operate the AI agents the seller has configured. Specifically:

• To answer seller questions about their orders, inventory, listings, advertising performance, and other connected channel data
• To draft replies to customer messages, which the seller reviews and approves before sending (unless the seller has explicitly enabled auto-send within a defined policy)
• To generate daily briefings, anomaly alerts, and recommended actions
• To optimise advertising campaigns within the bid and budget rules the seller has approved
• To provide audit logs of agent actions for the seller to review
• To improve xTrac AI through aggregated and anonymised usage analytics

We do not sell seller data. We do not share one seller data with other sellers. We do not use one seller data to train models that benefit other sellers.

5. Third-party service providers

To operate the AI agents, we send portions of seller data to the following service providers, under data processing agreements that prohibit each provider from using customer data to train their models:

• Anthropic, Inc. (Claude API) for AI inference. Anthropic processes data per its commercial Privacy Policy and does not train models on customer data.
• OpenAI, L.L.C. for AI inference fallback. OpenAI processes data per its Enterprise Privacy commitments and does not train models on customer data.
• Amazon Web Services, Inc. for cloud infrastructure (compute, storage, queueing). Data residency is selected based on the seller marketplace.
• Microsoft Corporation (Azure) for specific cloud services and Container Apps hosting.
• Vercel, Inc. for static site hosting (xtrac.app marketing surfaces).
• Stripe, Inc. and Razorpay for payment processing where the seller subscribes to a paid plan.
• Twilio, Inc. for one-time password delivery (where SMS verification is used).

We do not transfer seller data to any service provider beyond the categories required to operate xTrac AI. We do not enrol seller data in marketing or advertising programmes operated by third parties.

6. Data retention

• Active integration credentials are retained while the seller maintains the connection. Credentials are encrypted at rest using envelope encryption.
• LinkedIn: the access token is stored encrypted, stops being used when you disconnect, and expires after 60 days. Comments, mentions and commenters' details from a connected LinkedIn Page are kept for no more than 48 hours (profile details no more than 24 hours) and then deleted. Posts you publish through xTrac stay in your conversation history like other messages.
• Practo Ray: synced appointments (including patient name and mobile number) are stored encrypted and scoped to the connecting workspace. Disconnecting Practo Ray erases them from live systems immediately — they are not held in a recoverable soft-deleted state and are not kept in the AI agent's long-term memory — and any encrypted backups age out within 35 days. Details the assistant already quoted in a conversation follow the conversation-history retention below.
• Conversation history (agent reasoning, drafted messages, approval logs) is retained for 90 days by default. Sellers may configure shorter or longer retention from the workspace settings page.
• Aggregated and anonymised analytics may be retained longer for product improvement and capacity planning, but cannot be linked back to an individual seller.
• When a seller deletes their xTrac AI workspace, all associated personal data is purged within 30 days, except where retention is required by law (such as for tax and accounting records, retained per Indian statutory periods).

7. Your rights

Sellers and their personnel have the following rights regarding personal data we hold:

• Right of access: request a copy of the personal data we hold about you by emailing support@xtrac.app
• Right of deletion: request deletion of all your data by emailing support@xtrac.app. We will confirm deletion within 14 days, except where retention is required by law.
• Right of correction: update incorrect data through the xtrac.app account settings page, or by emailing support@xtrac.app
• Right to revoke integrations: revoke any integration at any time from the xtrac.app integrations page. Revocation immediately stops all data processing through that channel.
• Right to restrict processing: restrict specific agents from accessing specific data surfaces through the workspace settings page
• Right to portability: request a structured export of your data in machine-readable format by emailing support@xtrac.app
• Right to lodge a complaint: if you believe we have not handled your data lawfully, you may lodge a complaint with the Data Protection Board of India or your local data protection authority

8. Compliance (DPDP, GDPR)

Under the Indian Digital Personal Data Protection Act 2023 (DPDP Act), iEllipse Technologies is the Data Fiduciary for seller personal data processed through xTrac AI.

For sellers in jurisdictions covered by the EU General Data Protection Regulation (GDPR), we honour data subject rights under GDPR Articles 15-22. iEllipse Technologies is the Data Controller (under GDPR) for seller data processed through xTrac AI. Our service providers act as Data Processors. Data transferred outside the European Economic Area is protected by Standard Contractual Clauses.

For sellers in California, we honour rights under the California Consumer Privacy Act (CCPA) as amended, including the right to know, the right to delete, the right to correct, and the right to opt out of sale (we do not sell personal data).

9. Security

We implement industry-standard technical and organisational measures to protect personal data, including:

• TLS encryption in transit for all data flows
• Envelope encryption at rest for OAuth tokens, secrets, and sensitive personal data using AWS KMS or equivalent
• Least-privilege access controls for engineering and support personnel
• Audit logging of all data access by personnel
• Regular security reviews, including independent adversarial review of every security-relevant change and automated vulnerability scanning
• Vendor security review before onboarding new service providers

If a personal data breach occurs that is likely to result in a risk to seller rights, we will notify affected sellers and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by DPDP, GDPR, and applicable laws.

10. Cookies

xtrac.app uses a small number of strictly necessary cookies to maintain seller login sessions and remember workspace preferences. We do not use third-party advertising cookies on xtrac.app. The xtrac.app domain does not run advertising trackers.

The session cookie is named xtracai_session and is set with HttpOnly, Secure, and SameSite=Lax flags. It is required for the application to function and cannot be disabled while logged in.

11. Changes to this policy

We may update this privacy policy from time to time. When we make material changes we will notify registered sellers by email and update the Last updated date at the top of this page. Continued use of xTrac AI after a material change constitutes acceptance of the revised policy. Sellers who do not agree with a revised policy may revoke their integrations and delete their workspace at any time.

12. Contact