1. Introduction

ServerTrack ("we", "our", "us"), operated by Onecodesoft, respects your privacy. This Privacy Policy explains how we collect, use, and protect data when you use our SaaS platform, API, and WordPress Plugin.

2. Data We Collect

Our service primarily acts as a data processor for conversion events. We collect the following types of data:

• Customer Data (Hashed): To facilitate "Advanced Matching" on advertising platforms, we process emails, phone numbers, and names. This data is hashed (SHA-256) before being sent to third parties (like Facebook) whenever possible.
• Transaction Data: Order IDs, transaction values, currency codes, and purchased item details (SKUs, Names).
• Technical Data: IP addresses, User Agents, and Browser Cookies (specifically _fbp and _fbc) required for attribution.
• Account Data: For ServerTrack account holders, we collect your name, email, and billing information.

3. How We Use Data

We use the data collected solely for the following purposes:

• To forward conversion events from your server to destination platforms (e.g., Facebook Conversion API) on your behalf.
• To provide accurate event logging and analytics within your ServerTrack dashboard.
• To monitor API usage, enforce rate limits, and prevent fraudulent activity.

We do NOT sell your customer data to third parties.

4. Data Retention

We believe in data minimization. Event logs are retained only for a limited period to allow for debugging, reporting, and "deduplication" by ad platforms:

• Free/Basic Plans: Logs are retained for 7 days.
• Pro/Agency Plans: Logs are retained for up to 30 days.

After this period, raw event data is permanently deleted or anonymized.

5. Data Security

We implement industry-standard security measures, including TLS 1.3 encryption for data in transit and AES encryption for data at rest. Access to your data is restricted to authorized personnel only.

6. Your Rights

Under GDPR, CCPA, and other privacy laws, you have the right to:

• Access the personal data we hold about you.
• Request corrections to inaccurate data.
• Request the deletion of your data ("Right to be Forgotten").

To exercise these rights, please contact us using the details below.

7. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@onecodesoft.com
Address: Onecodesoft, SR Plaza, Mirpur, Dhaka, Bangladesh.