Effective September 29, 2026
Privacy Policy
What we collect when you use Backlink Tracker, why we need it, who we share it with, and how to reach us about it.
1. Who we are
Backlink Tracker is operated by BackbeatSEO (“we”, “us”). We decide how the personal information described here is used. You can reach us about anything on this page at alishiman2000@gmail.com.
2. What we collect
Your account. Your email address, a scrambled (hashed) version of your password, and your website’s domain. We also keep account facts such as whether your email is verified, your plan and trial dates, and when you last ran a manual check.
Your sign-off. If you set one in Settings, your first name and organization. We add them to the end of the recovery messages you prepare (for example, “Kevin from Acme”). Both are optional. If you leave them blank, messages are signed with your website’s domain instead.
The links you track. What you enter or import: backlink URLs, prices, purchase dates, SLA deadlines, agency and builder details, article titles, and publisher contact names and email addresses. We also keep the results of every check, such as status, indexing and errors.
Gmail connection. If you connect Gmail, we ask Google only for your email address, to confirm the account is yours. We store that address and the sign-in tokens Google returns, encrypted. We don’t request access to read, send or manage your email.
Messages you prepare. When you open a recovery message, we save a copy of the recipient, subject and body (including your sign-off), and when you opened it. Messages you’ve already opened keep the sign-off they had, even if you change it later. The message itself opens in your own Gmail, and whether it’s sent is up to you. We never see replies.
Contact discovery results. When you use contact discovery, the contacts we suggest for a publisher (names, roles, email addresses and where we found them) are saved with the link.
Billing. Your Stripe customer and subscription IDs and your subscription status. Your card details go straight to Stripe, and we never see or store them.
Security records. The IP address behind login, signup and waitlist attempts, and the email address used for password reset requests, so we can limit repeated attempts and block abuse.
Marketing and usage. If you arrive from a Google ad, we save the ad click ID (gclid) and attach it to your account and your Stripe customer record, so we can tell which ads lead to sign-ups. We save your Google Analytics client ID with your account. We record product events such as signing up, adding links, importing a CSV and preparing a message. These events don’t include your email address or link contents.
Waitlist. If you joined our waitlist, your email address and when you agreed to be contacted.
3. How we use it
- To run the service: check your links, track indexing, open cases, and prepare recovery messages, signed with the name you choose.
- To manage your account: sign-in, email verification, password resets, and your subscription.
- To keep the service secure: rate limits, lockouts after repeated failed logins, and signing you out everywhere after a password reset.
- To understand and improve the product and our marketing: which pages and ads bring people in, and which features get used.
- To contact you about your account, or about early access if you joined the waitlist.
4. If you run a site we check
Our customers add backlinks they’ve paid for, along with contact details for the sites that host them. Our checker, which identifies itself as BacklinkTrackerBot/1.0, visits those pages about once a week and follows your robots.txt. For contact discovery, we may read a few public pages on your site, such as contact or about pages, to suggest who a customer should email.
Any message about a link is sent by our customer, from their own Gmail, not by us. It’s signed with the name and organization our customer chose, so you may see them in the message. Each one includes a link that stops that link from being flagged again. You can also ask us about data we hold about you at alishiman2000@gmail.com.
7. How long we keep it
We keep your account and link data for as long as your account exists. If your trial ends or you cancel, we keep it so you can pick up where you left off, but we stop checking your links. Deleting a link from your account removes it along with its check history.
To delete your account and its data, email alishiman2000@gmail.com. We’ll delete it from our live systems. Copies can remain in database backups for a while after that, until those backups are replaced. Security records such as IP addresses may be kept longer to protect the service.
8. How we protect it
- Passwords are stored only as a salted scrypt hash, never in plain text.
- Each account’s data is kept apart from other accounts at the database level.
- Gmail sign-in tokens are encrypted before they’re stored.
- Email links for verification and password reset work once and expire after two hours.
- Resetting your password signs you out on every device.
9. Your choices and rights
You can ask to see the personal information we hold about you, correct it, or delete it. You can also withdraw consent, for example to waitlist emails, at any time. You can disconnect Gmail, or change or clear your sign-off, in Settings whenever you like. Email alishiman2000@gmail.com and we’ll respond within 30 days.
If you’re not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
10. Children
Backlink Tracker is a business tool and isn’t meant for anyone under 18. We don’t knowingly collect information from children.
11. Changes to this policy
If we change how we handle personal information, we’ll update this page and the effective date at the top. For significant changes, we’ll tell account holders by email before they take effect.
12. Contact
BackbeatSEO, operator of Backlink Tracker. Email: alishiman2000@gmail.com. Mail: 100 University Ave, Toronto, ON M5J 2Y1. Send us a message.