Privacy Policy

Last updated 21 Oct 2026 · Version 1

This is a draft, not yet read by a lawyer. Parts of it may change before it is final.

Draft written by Etroy, to be read by a lawyer before it is final. Text in [square brackets] is still to be filled in.

1. Who is responsible

Etroy Business Solution ("Etroy", "we"), [registered address], Bangladesh, runs Etroy Growth at https://etroygrowth.etroybd.com. Questions about your data: [contact email].

2. What we keep, and why

• Your account: name, email address, password (stored only as a hash that cannot be turned back into the password), and, if you turn on two-step sign-in, its secret (stored encrypted). To let you sign in and keep your account safe.
• Your workspace: its name, its people and their roles, and a record of who changed what and when. So the business knows what was done in its workspace.
• Your websites: the addresses you add and what the crawler read on their public pages (titles, descriptions, headings, links, problems found), and page speed results from Google PageSpeed Insights. To make your reports.
• Google Search Console, if you connect it: read-only access to the website you choose, and from it the searches, pages, countries and devices with their clicks, impressions and positions. The access tokens are stored encrypted. To show you how people find your website.
• Your website's connector, if you set one up: a secret your website uses to sign requests, stored encrypted. To let your website's admin open the service and show a summary.
• Technical records: the session cookie that keeps you signed in and a cookie that protects forms; the web server's records of requests. No advertising or tracking cookies.

3. Data from Google

Etroy Growth's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Search Console data only to show your own workspace its reports. We do not sell it, use it for advertising, or show it to anybody outside your workspace. Disconnecting gives the access back to Google; you may choose to delete the numbers already read at the same time.

4. Who else handles it

We do not sell personal data. It passes only to the services the product runs on: the hosting provider where the service and its database run, [the email sending service] for account emails, [the off-site backup storage provider] for nightly backups, and Google when you connect Google services. [Names to be filled in once chosen.]

5. How long we keep it

• Search Console numbers: sixteen months, as Google keeps them.
• Website reports: each check is kept so you can see what changed; the details of older checks are reduced over time.
• Backups: fourteen days on the server and thirty days off it. [Not yet true: the storage off the server is still to be chosen. Remove this note once it is set up.]
• Your account and workspace: while you use the service. A workspace's owner can download all of its data, and can delete the workspace: it closes at once, and its data is deleted after 30 days, during which we can restore it if asked. It then leaves the backups as they age out. People's own accounts are not deleted with a workspace; write to us to have yours deleted.

6. Keeping it safe

The service runs over HTTPS only. Secrets and access tokens are stored encrypted. One workspace can never see another's data; this is tested every time the software changes. Etroy's own staff must use two-step sign-in.

7. Your choices

You can see and change your account details in your profile. To get a copy of your data, to correct it or to have it deleted, write to [contact email]. A workspace's owner decides for the workspace's data.

8. Changes

When this policy changes, the version number above changes, and everybody using the service is asked to accept the new version before going on.