Antivirus software seller vowed to shield users’ data from tracking, then allegedly collected and sold it instead, FTC says.