Privacy Policy

Last updated: June 11, 2026

1. Who We Are

Bixora.ai is a marketing intelligence platform operated by VR Data Experts, based in Ontario, Canada (“Bixora.ai”, “we”, “us”). Bixora.ai helps agencies and businesses improve their visibility in AI search results and manage Google Ads performance, including lead tracking, call tracking, AI-based lead quality scoring, and offline conversion reporting to Google Ads.

This policy describes the personal information we collect, how we use it, who we share it with, and the choices and rights available to you. It applies to the Bixora.ai application, our websites, the tracking technology we provide to our clients, and the telephony services we provision.

2. Information We Collect

a) Account information

Name, email address, company name, role, and login credentials. Authentication credentials are managed by our authentication provider; we do not store plaintext passwords.

b) Client business information

Business name, website domain, industry, service descriptions, and the target keywords and locations you provide during onboarding so we can configure campaigns and visibility scanning.

c) Lead and caller information

When our clients’ customers submit forms or call tracking phone numbers provisioned through Bixora.ai, we collect names, email addresses, phone numbers, message content, call metadata (caller number, time, duration), call recordings, and call transcripts.

d) Website visitor data

Our tracking script, installed on client websites, collects page views, click events, form submissions, Google click identifiers (gclid), UTM parameters, referring URLs, device and browser information, and IP address (used for approximate location and fraud prevention).

e) Google user data

Data obtained when you connect a Google account via OAuth. See Section 3 for details.

f) Payment information

Payments are processed by Stripe. We receive billing status and transaction metadata; we do not store full card numbers.

g) Communications

Support emails and other communications you send to us.

3. Google User Data

When a user connects a Google account, Bixora.ai requests access to the Google Ads API (and, where enabled, Google Tag Manager) solely to provide the service the user configures: listing and linking ad accounts, reading campaign and performance data, creating conversion actions, uploading offline conversion events, and managing tags the user asks us to create.

We access only the scopes the user grants. We do not sell Google user data, do not use it for advertising of our own, and do not allow humans to read it except (a) with the user’s explicit permission for support, (b) for security purposes, or (c) where required by law.

Bixora.ai’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Bixora.ai’s access at any time at https://myaccount.google.com/permissions. Revocation stops all further data access from the connected account.

4. How We Use Information

• To provide and operate the platform: lead capture, call routing and forwarding, dashboards, and reporting.
• AI processing: call recordings and transcripts, lead details, and business context are processed by AI models to transcribe calls and score lead quality. Citation and visibility scanning queries AI search engines about the client’s public web presence.
• Conversion reporting: qualified lead events (with identifiers such as gclid or caller phone number, hashed where applicable) are uploaded to the client’s own Google Ads account to improve their campaign optimization.
• Service communications, billing, security, and legal compliance.

We do not sell personal information. We do not use client or lead data to train our own AI models.

5. Call Recording Notice

Calls to tracking numbers provisioned through Bixora.ai may be recorded and transcribed for lead quality purposes. Our clients are responsible for providing any caller notification or obtaining any consent required by the laws applicable to them. Recording can be disabled per account on request.

6. Service Providers (Subprocessors)

We use the following service providers. Each receives only the data necessary for its function.

• Supabase — database, authentication, and hosting of server functions.
• Vercel — web hosting.
• Google — Ads API, Tag Manager, and OAuth.
• Twilio and SignalWire — telephony and call recording.
• Moja AI — call routing for clients using it.
• AssemblyAI — call transcription.
• Anthropic, OpenAI, Google Gemini, and Perplexity — AI processing for scoring, content, and visibility scanning.
• Stripe — payments.
• Resend — transactional email.
• Make.com — scheduled job triggers.

7. Data Retention & Deletion

We retain data while an account is active and as needed for legal and billing purposes. Clients may request deletion of their data, including call recordings and lead records, by contacting us; we will delete it within 30 days except where retention is legally required. Disconnecting a Google account stops collection of Google user data; previously stored campaign metrics can be deleted on request.

8. Security

We protect data using encryption in transit (TLS) and at rest, row-level security and role-based access controls, scoped API credentials, and audit logging. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Your Rights

Under Canada’s PIPEDA and, where applicable, the GDPR, UK GDPR, and similar laws, you may have rights to access, correct, delete, and port your personal information, to withdraw consent, and to lodge a complaint with a supervisory authority. To exercise these rights, email rakesh@vrdataexperts.com.

10. Cookies & Tracking

The Bixora.ai application uses essential cookies for authentication. The tracking script we provide to clients sets first-party identifiers on the client’s website to attribute visits and leads to advertising campaigns; clients are responsible for their own website cookie disclosures.

11. International Transfers

Data may be processed in the United States and Canada by the providers listed above.

12. Children

The service is not directed to individuals under 18, and we do not knowingly collect their personal information.

13. Changes to This Policy

We will post updates to this policy on this page with a revised “Last updated” date.

14. Contact

VR Data Experts / Bixora.ai, Ontario, Canada — rakesh@vrdataexperts.com.