Privacy Policy

TurboReach is run by BrightVector Technologies Private Limited, 61/7, Akkayapalli, Ravindra Nagar, Cuddapah (Kadapa) – 516003, Andhra Pradesh, India. In this page “we” and “us” mean that business, and “TurboReach” means the website at turboreach.in and the app behind it.

Questions about this page, and any request or complaint about your details, go to Faiz Ahmed Khan at faiz@brightvector.in.

Three kinds of people have details in TurboReach, and the page takes them in turn.

• A business with an account. You signed up to build a shop, bill at the counter, or be found on Google. We decide how your account’s details are used, and we answer for them.
• A customer of such a business. You ordered from a shop built on TurboReach, or were billed at its counter. The shop decides how your details are used. We hold them for the shop.
• A visitor. You opened our website, a shop, or one of our free tools without an account.

About you

• Your name, email address and mobile number, and your business’s name and kind.
• Your password, kept only in a scrambled form that cannot be turned back into the password. We cannot read it.
• If you sign in with Google: your email address and name. Google sends its number for the account and the address of your picture along with them, and we do not keep those.
• If you sign in with a mobile number: the number, and for each code we send, a scrambled form of it and the time. A code works for five minutes.
• Each device that is signed in: when it signed in, and how its browser describes itself, which is its name and version and, on a phone, often the phone’s model. Your account screen lists them so you can sign one out.
• The day and time you agreed to the terms.
• A profile picture, if you add one, and which of our notices and emails you want.

About your shop

• Its name, address, city, state, PIN code, phone number and GSTIN; its logo, description and policies; delivery charges; what goes on your invoices, with the signature picture if you add one; and the UPI ID your counter makes a payment code from.
• Your products with their photos, prices and stock, and your pages and posts.
• Your own domain name, if you connect one.

About your work in “SEO & Google”

• The websites you add, your answers to the day-one questions, your review link, and the lists you ticked.
• Up to twelve check-ups for each website, each with the addresses and titles of the pages we read. A check-up reads public pages, also of a website you have not yet proven is yours.
• Your weekly tasks, and how many AI drafts you asked for each day with what they cost us.
• We may also look at these websites by ourselves: a check-up once a week, and on the other mornings one look at a website’s front page to see that it still opens. For each website we keep when we last looked and what was not working then. We stop looking when nobody has signed in to the account for 90 days.
• From those looks we may send you two kinds of email, to the address you sign in with: one a week with your score and one thing to do, and one on the day a website stops opening, Google can no longer read it, or your Google connection stops working. The same news goes under the bell in the app. We send them only once you have shown the address is yours, by pressing a link we sent to it or by signing in with Google. Each email has a link at the bottom that stops it, and both have a switch in your account’s settings. We keep a note of the weeks the weekly email was sent to you.
• Competitors. Where this is switched on, we send each search you named in the day-one questions to Serper, a company that asks Google which websites it lists for it. Your website’s address is not sent: we only compare it with the list that comes back. We keep Google’s first page for each search, with the place your website is at, for the twelve latest looks, and the websites you said are not competitors. It happens when you press “Look at Google now”, and once a week by itself. What comes back is what Google shows anyone who types the search. If customers come to your business in person, we also ask for the businesses Google’s map lists for each search, with their stars and number of reviews, and keep those with the look. After a look we open the front page of your website and of up to three of your competitors’ websites, to time its answer and count its pictures and pages. To keep the looks within their limits, we count the looks and maps each of your websites starts, by day. When you press “Draw the map”, we send the search and nine points around where Google has your business, and keep your place at each.
• AI assistants. Where this is switched on, we send each search you named in the day-one questions to OpenRouter, which asks ChatGPT’s and Gemini’s models for it, with their web search on, the way a customer would ask. Only the search is sent: not your name, your business’s name or your website. We look for your business in the answers ourselves. We keep each answer, cut to length, whether it named you, and the websites it read, for the twelve latest looks. It happens when you press “Ask ChatGPT and Gemini”, and once a week by itself.
• What Google tells us once you connect it, set out under Google.

What the public sees. Your shop shows what you put on it: the name, city and state, logo, description, products, policies, and the contact details you typed for the shop’s contact section. Your shop’s phone number is used for its WhatsApp button unless you give another number for that. Your address, PIN code and GSTIN are not on the shop’s pages. They are printed on your bills, with your phone number, so anyone you give a bill to, or its link, sees them. A link to a customer’s credit account, if you send one, shows your UPI ID so they can pay you.

What we see. The people who run TurboReach have admin screens that show, for each shop, its owner’s name and email address, the shop’s phone number, address and GSTIN, and its totals of orders and sales. We use them to support shops and to run TurboReach.

Pictures. A picture you upload is stored under a random name, with any location saved inside the photo removed (a GIF is stored as it is). It is not in any list, but anyone who has a picture’s exact address can open it. That is true of the signature picture too.

About your customers

We keep these for you, to run your shop. You decide what is collected and what is done with it, and you answer to your customers for it. The Terms of Service say more.

• Online orders. A shopper’s name, email address, mobile number, scrambled password and saved addresses, with the map position of an address where they pressed “Use my location”; and each order with its items, delivery address, phone number and any note.
• Counter billing. A customer’s name, mobile number, email address, GSTIN, state and your notes; visits, money spent, credit owed and each entry in the credit book; points; and every bill with how it was paid and any reference you typed.
• Lead management. A person who asked about buying: their name, mobile number, email, city and what they asked about, with your notes and each call, message, meeting or visit you log; and a call-back request sent from your shop’s page.
• Customer Intelligence. Worked out for you from the orders, bills and enquiries above, each time you look: who is the same person (by mobile number), how much they spent, their grade and groups, and when they are due back. It keeps only what you type yourself: notes, tags, birthdays and anniversaries, and the groups you make. When a customer asks you to delete their details, “Forget this customer” takes their name, number, email and address off every order and bill, and deletes their account, counter record, enquiries and your notes. The orders and bills stay, with nothing on them that says who bought, because tax law asks you to keep them.
• On the device you bill on. The browser keeps the bill being made, with the customer attached to it. A device set up for counter billing keeps billing when the internet drops, and for that it also keeps a copy of your products, your customer list, your shop’s details for the top of a bill, your bills not yet sent and those sent in the last three days, and a key that lets that device bill with nobody signed in. All of it stays there, also after you sign out, until you press “Stop using this device”.

You dealt with the shop, not with us. The shop’s own privacy policy, if it has written one, is linked at the bottom of the shop. For the shop, TurboReach keeps what the part above lists under “About your customers”.

• Emails. We send the shop’s emails about your order: that it was placed, and how it is getting on. If the shop asks for reviews, the email that says your order was delivered may end with one request to review the shop on Google. You get that request once per shop.
• A bill’s link. The code printed on a counter bill opens that bill on your phone. Anyone holding the link can open it. It shows your name, the last four digits of your mobile number, a GSTIN if you gave one, what you bought, how it was paid with any reference the shop typed, and your points. A shop may also send you a link to your credit account, which shows your balance and its latest entries in the same way.
• No online payment. Orders from a shop are paid on delivery, and a counter bill is paid to the shop directly. TurboReach never asks for and never holds card or bank details.

To delete your online account, use “Delete my account” on the shop’s account page. Your name, mobile number, email and saved addresses go, from your orders too; the shop keeps the orders themselves, with nothing on them that says who bought, because tax law asks it to. To be forgotten everywhere the shop keeps you, also at its counter, ask the shop: it decides, and TurboReach gives it the button to do it.

To see or correct your details, ask the shop first. You can also write to us at faiz@brightvector.in. We pass your request to the shop and help it answer.

A shop’s owner sees how many people visited and which products they looked at. This is how that is counted.

• The first time you open a shop, your browser makes up a random number and keeps it. The number says nothing about you.
• With each page you open, the shop is sent that number, the page’s address inside the shop, and the product if the page is about one. Adding to the cart sends the product too. We record those with the time.
• We do not record your name, your internet address, your device or where you came from with a visit, and a visit is not tied to your account or to an order.
• Shops at turboreach.in share one number per browser. A shop on its own domain has its own.

These counts are kept for as long as the shop exists. To start again as a new visitor, clear the site’s data in your browser. There is no advertising network behind any of this, and no company but the shop and us receives it.

Our own pages carry no advertising trackers and no analytics from other companies.

• Free website check-up. You type a website’s address. We read up to 25 of its public pages, the way a search engine does, and show what we found. For one day anyone with the result’s link can open it. After that it opens for nobody, and it is deleted when the next free check-up is run. Nothing about you is kept with it.
• Google rank checker. You type a website’s address and a search. The search is sent to Serper, a company that asks Google which websites it lists for it. The website’s address is not sent to anyone: we only compare it with the list that comes back. We do not save either and do not write them to our logs. We keep only two counts for the day: how many checks were made, and how many pages of Google’s list they read.
• Review QR poster. The poster is drawn in your browser. We do not save the link or the name. If you open the poster from your TurboReach account, both travel in the page’s address.
• Review reply writer. The stars, the review and the names you type are sent to an AI service to write the reply (see AI). We do not save them and do not write them to our logs. We keep only a count of how many replies were written that day.

So that no one can overload these tools, we count requests by internet address. The count is held in memory for a day at most and is never saved.

This part is about what TurboReach receives from Google. It applies only if you use one of the things below.

Sign in with Google

Where the sign-in page offers it, Google tells us who you are so we can open your account. We keep your email address and name from it and nothing else, and we keep no permission to your Google account from that sign-in.

Connect Google

On the “SEO & Google” screen you can connect the Google account that has your website in Google Search Console. You sign in on Google’s own page, and Google shows you what we are asking for before you agree.

What we ask Google for.

• Which Google account it is: its email address and Google’s number for it.
• Search Console: to see which websites the account has there, with each one’s search numbers and sitemaps, to send Google your sitemap, and to add your website to your Search Console. This is Google’s full Search Console permission. It would also allow removing a website or a sitemap, which TurboReach does not do.
• For a shop built on TurboReach only: leave to prove to Google that the shop is yours, so we can add it to your Search Console for you. Of Google’s two permissions for proving a website this is the narrower one. It can prove a new website, and it cannot touch one that is already proven.
• Only when you press “Allow at Google” on the Google business profile card: leave to see and manage the Google business profiles your Google account looks after. It is asked for on its own, and you can say no to it and keep the rest.

What we read. The list of websites in your Search Console and your level of access to each. For the website you connected: how many times it was shown and clicked, day by day, for the last 28 days and the 28 before; the searches it was shown for, with those numbers and its position; the sitemaps Google holds for it; and, for a shop, the name of the small file Google wants to find on it. If you gave leave to see business profiles: the list of the profiles your account manages, and for the one you pick as your website’s, its details as Google shows them (name, address, category, website, phone, description, opening hours, where it is on the map, whether it is verified), its newest reviews with the reviewers’ names as Google shows them and your replies, how many photos it has, and how many people called, asked the way, opened your website or saw the profile, day by day for the last eight weeks.

What we keep.

• The Google account’s email address, Google’s number for it, and which of the permissions above you granted.
• The permission Google gave us, locked with encryption, so that a copy of our database does not carry anyone’s Google access.
• Which Search Console entry belongs to your website, your level of access to it, the sitemap that was sent and when, and the name of the small file Google checks a shop by.
• The latest numbers: the totals, the 28 days, the ten searches that brought the most visitors, the sixty the website was shown for most, and the searches you asked us to follow. Each new fetch replaces the last one. Page addresses are not kept.
• The searches you put away under “What to write next”, up to 200 of them. Many of those are searches Google reported.
• For the business profile you picked: which profile it is, and the latest of what we read about it. Each new fetch replaces the last one, and each part of what we read (the details, the reviews, the numbers) is deleted 25 days after it was read if it is not read again: Google allows no more than 30. We also keep the stars of its newest reviews, so that a new or changed one is told to you once, the latest update you posted from here, and which of your product photos you added.

What we do with it. We show it to you, on your own “SEO & Google” screen: the numbers, your position for the searches you follow, the lights, and the ideas under “What to write next”. We send Google your sitemap once. We add your shop to your Search Console when you press the button for it. And if Google says the account owns the website, we take the website as proven yours.

For a business profile we change nothing at Google unless you press the button for that very change, after seeing it: a reply to a review, the description, the website, the opening hours, product photos, or an update. Once a day we read the profile again, and tell you, under the bell and by email, about a new review of one or two stars (its stars, not its words or who wrote it), the profile losing Google’s “verified”, or Google changing it by itself. If you switch it on, your shop shows its newest reviews that have words, as their customers wrote them, with the reviewers’ names and Google’s rating, the way Google shows them to anyone. If you ask the AI for a reply to a review, the review’s words, its stars, the reviewer’s name and your business’s name are sent to the AI service (see AI).

What we do not do. We do not sell it, lend it or give it to anyone. We do not use it for advertising. We do not use it to train AI models. No other account sees it. People at TurboReach do not read it, unless you ask us for help with it, or we have to look into a fault or misuse, or the law requires it. If TurboReach is ever sold or joined with another business, what Google gave us about you moves only if you agree first.

When a search leaves us. “What to write next” can suggest a search Google reported for your website. If you press “Write this post” on it, the search becomes the new post’s starting title and travels in that page’s address. If you then ask the AI for a first draft or a summary of that post, the search and the title are sent to the AI service (see AI). The words only, never the numbers, and only when you ask. Like any page address, and like any draft the AI gets wrong, the words can also leave a trace in the logs described under How long we keep things.

Taking it back. Press “Disconnect” on the website. That deletes the numbers, the searches and the business profile we kept for it, with the alerts about that profile, and unlinks it from Google. “Pick another profile” forgets the business profile alone, and its alerts. When no other website of yours uses that Google account, we also delete our copy of the permission and ask Google to cancel it. Google’s permission is left standing in one case only: when the same Google account is also connected from another TurboReach account, which cancelling would cut off. Removing the website from TurboReach does the same as “Disconnect”, and so does switching it to another Google account. You can also remove TurboReach’s access at Google, at myaccount.google.com/connections (opens in a new tab); we can then fetch nothing more, and “Disconnect” deletes what we had already fetched. What stays after a disconnect: the note that the website was proven yours, and what you wrote yourself, such as a post whose title began as one of those searches.

TurboReach’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements.

AI never runs by itself. It writes when you ask: a draft, a summary, an explanation or a reply at the press of its button, and a product’s details when you give it the product’s photo. Opening or reloading a screen asks it nothing. What it writes is for you to read and change, and it is saved only when you choose to use it.

What it is told.

• A product’s description. The product’s name, its category, the forms it comes in, its metal if it is jewellery, and any description you already wrote.
• A post’s summary or first draft. For a summary, the post’s title and text. For a first draft, the search the post is for and its title.
• “Explain it simply”. Our own wording of the problem and up to three examples: page addresses from your check-up, or product names.
• With each of those. Your business’s name (or your website’s name, if it is not a TurboReach shop), what it does in your words, its categories, its city and state, and who you sell to.
• “Fill details from a photo”. The photo you picked, made smaller, and the names of your categories. It is sent as soon as you pick it.
• The free reply writer. The stars, the review and the two names, as typed.

For a draft or a reply we add no price, phone number, address, customer detail or order of our own. What you wrote yourself, such as a description or a post, is sent as you wrote it, and a photo is sent as it is, with whatever is printed on the pack. Leave out anything you would not want sent.

Who receives it. Our AI requests go to OpenRouter, a company in the United States, which handles each one and passes it to the company that runs the AI model. With every draft and reply we instruct OpenRouter to use only a company that, under OpenRouter’s rules, does not store what it is sent and does not train a model on it. A photo does not carry that instruction: the company that reads it may keep it and may learn from it. Do not use it on a photo that shows a person or a private paper.

TurboReach keeps these things in your browser’s own storage.

• One sign-in cookie. It keeps you signed in for 30 days after you last used it, and cannot be read by scripts. A shopper gets one for each shop they sign in to. Beside it sits a marker that this browser has signed in before.
• In a shop: your cart, the delivery address you last picked, and the random number that counts visits.
• For an account holder: which screen to open first, a design not yet saved, the shops this browser manages (so that your own visits are not counted), and choices such as sound, theme, printer and label size.
• Where you bill at the counter: what is listed under “On the device you bill on”, and the counter’s own page, stored so that it opens without the internet.

We set no advertising cookies and none for other companies. On the sign-in pages, where “Continue with Google” is offered, Google’s own button is loaded from Google and may set Google’s own cookies.

These companies do part of the work, and each is sent what its part needs. This is the list for the live website, as it stands on the date at the top of the page.

What we store is kept in India. On its way it passes through servers in Singapore, and the companies above that work in other countries, the United States among them, handle the part named beside them there.

A shop’s WhatsApp button, and “share on WhatsApp”, open WhatsApp on your own phone with a message ready. We send WhatsApp nothing ourselves. A shop may also show a picture or a link from another website, which your browser then fetches from there. The sample products a new shop starts with show pictures from Unsplash and Flickr.

We may have to hand details to a court, the police or another authority when the law requires it. And if TurboReach is ever sold or joined with another business, the details go with it under this same page, and account holders are told first.

• Your account and your shop: for as long as you keep the account. When you ask us to delete it, we delete the account and the shop with its products, customers, orders and bills within 30 days. Tax law may require you to keep your invoices for some years, so take a copy of what you need first.
• Sign-ins: a device’s sign-in stops working after 30 days without use. The record of it stays with your account. A one-time code works for five minutes, a password-reset link for one hour, and an email-check link for one day. A request for a sign-in code stays on record as the number, the scrambled code and the time, also for a number that never opened an account.
• Google’s numbers: until the next fetch replaces them, or until you press “Disconnect”. The searches you put away stay until then too, or until you bring them back.
• Google’s lists for your searches (competitors): the twelve latest looks for each website and the latest map of your area, until you remove the website. The count of looks started: this month’s and last month’s.
• What AI assistants answered: the twelve latest looks for each website, until you remove the website.
• Visit counts: for as long as the shop exists.
• A free check-up: it opens for one day, and is deleted when the next one is run.
• The weekly email: the note that it was sent is cleared out about six months later. We keep no copy of the email itself.
• Pictures no longer used by any product or page: cleared out, usually within a few days.
• Logs and safety copies: the hosting company keeps its log of requests, and we keep a log of faults, for a limited time. A fault’s line can hold an email address a message could not be sent to, the first words of an AI draft that had to be thrown away, or what the AI said about a photo. Safety copies of the database are kept for a limited time as well, so something you deleted can stay in one until that copy is replaced.

• See and correct. Most of what we hold about you is on your own screens, where you can change it. For a copy of the rest, write to us.
• Delete. Write to us from your account’s email address and we delete the account as described above. There is no button for this in the app yet.
• Take back a permission. “Disconnect” takes Google back. AI is used only when you ask for it.
• Stop an email. The weekly email and the alert emails each end with a link that stops them, with no need to sign in. Your account’s settings have a switch for each.
• A shop’s customer. Ask the shop, or write to us and we pass it on.
• Complain. Write to Faiz Ahmed Khan at faiz@brightvector.in. We answer within 30 days. If our answer does not settle it, you may take the complaint to the authority that Indian law names for the protection of personal data.

A TurboReach account is for an adult running a business. We do not knowingly open an account for anyone under 18. If you believe a child has one, write to us and we will close it.

• Everything travels between your browser and us over an encrypted connection.
• Passwords and one-time codes are kept only in scrambled form.
• The permission Google gives us is locked with encryption.
• The sign-in cookie cannot be read by scripts on the page.
• Only the people who run TurboReach can reach the database.

No system is perfectly safe. If we learn that someone got at your details who should not have, we will tell you, and the authorities where the law requires it.

When what we do changes, this page changes with it and the date at the top moves. If a change means your details are used in a new way, account holders are told by email or in the app before it takes effect.

Faiz Ahmed Khan
BrightVector Technologies Private Limited
61/7, Akkayapalli, Ravindra Nagar
Cuddapah (Kadapa) – 516003
Andhra Pradesh, India
faiz@brightvector.in