Privacy Policy

Last Updated: August 15, 2026

This Privacy Policy explains how we collect, use, process, store, and share information when you visit our website, create an Asmos account, connect an ecommerce store, use our software and optimization services, or otherwise interact with Asmos (collectively, the “Services”).

By using Asmos, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you interact with Asmos and which features you use.

Account Information

When you create or manage an Asmos account, we may collect:

• Name

• Email address

• Company or organization name

• Account credentials

• Profile information

• Account preferences

• Team and workspace information

• Communication preferences

If you sign in using a supported third-party authentication provider, we may receive information made available by that provider according to your settings and authorization.

Billing Information

When you purchase an Asmos subscription, payment information may be processed by our third-party payment providers.

We may receive information such as:

• Billing name

• Billing address

• Subscription plan

• Payment status

• Transaction information

• Invoice information

• Limited payment method details

We generally do not directly store complete payment card numbers.

2. Store and Website Information

When you connect an ecommerce store, website, or other digital property to Asmos, we may collect and process information necessary to analyze and optimize that property.

Depending on the integrations and features you enable, this may include:

• Store URL and domain

• Store name

• Ecommerce platform

• Product and collection information

• Product pricing

• Store theme and layout information

• Brand colors

• Typography

• Images and other brand assets

• Existing forms and pop-ups

• Offers and promotions

• Website structure

• Publicly available website content

• Campaign configuration

• Conversion goals

• Traffic information

• Store configuration information

We use this information to understand your store, generate experiences consistent with your brand, provide recommendations, and operate Asmos optimization features.

3. Visitor and Interaction Data

When Asmos is installed on a customer's website, we may process information about how visitors interact with that website and with experiences powered by Asmos.

Depending on the customer's configuration and applicable consent requirements, this information may include:

• Page views

• Session activity

• Pop-up impressions

• Pop-up views

• Clicks

• CTA interactions

• Close interactions

• Form interactions

• Form submissions

• Form abandonment

• Scroll behavior

• Time spent

• Interaction timing

• Referring pages

• Traffic source

• UTM parameters

• Device type

• Browser type

• Operating system

• Screen characteristics

• Approximate geographic information

• Language

• Experiment assignment

• Variant exposure

• Conversion events

Asmos may also process behavioral signals used to understand engagement with conversion experiences.

Where enabled, these may include signals such as interaction sequences, hover activity, repeated clicks, engagement duration, field interactions, and similar behavioral events.

We use this information to measure performance, identify user experience issues, conduct experiments, and optimize conversion experiences.

4. Form and Lead Data

Customers may use Asmos to collect information from their website visitors.

Depending on the form configured by the customer, this may include:

• Email address

• Phone number

• First and last name

• Marketing preferences

• Form responses

• Custom fields

• Consent status

• Signup source

• Submission timestamp

In these circumstances, the Asmos customer generally determines what information is collected and why.

Asmos processes that information on behalf of the customer to provide the Services.

Customers are responsible for ensuring that their forms, marketing activities, disclosures, and consent mechanisms comply with applicable laws.

5. Ecommerce and Conversion Data

When enabled through supported ecommerce integrations, Asmos may process information about shopping and conversion activity.

This may include:

• Product views

• Products added to cart

• Products removed from cart

• Cart value

• Checkout events

• Discount or promotional code usage

• Purchases

• Order value

• Conversion timestamps

• Revenue associated with campaigns or experiments

• Customer status where made available by the connected platform

We use this information to measure conversion performance, attribute outcomes, evaluate experiments, and provide analytics and optimization recommendations.

Asmos does not require payment card information from your customers to perform these functions.

6. Experiment and Optimization Data

Asmos may generate and process information relating to experiments conducted through the platform.

This may include:

• Experiment identifiers

• Variant assignments

• Variant designs

• Traffic allocation

• Impressions

• Conversions

• Conversion rates

• Experiment duration

• Statistical estimates

• Performance differences

• Eliminated variants

• Winning variants

• Optimization decisions

• AI-generated recommendations

We use this information to operate A/B testing, automated experimentation, traffic allocation, optimization, and reporting features.

7. AI and Automated Processing

Asmos uses artificial intelligence, machine learning, statistical models, and automated systems to provide certain features.

These systems may analyze information such as:

• Store characteristics

• Brand information

• Campaign performance

• Visitor behavior

• Experiment results

• Conversion patterns

• Historical performance

• Audience characteristics

This information may be used to generate or recommend:

• Pop-up designs

• Headlines

• Calls to action

• Layouts

• Offers

• Targeting strategies

• Trigger conditions

• Experiment variants

• Optimization decisions

• Performance insights

Where autonomous optimization features are enabled, Asmos may automatically adjust experiments or experiences according to the settings and permissions selected by the customer.

8. Information From Integrations

Customers may connect Asmos with third-party services such as ecommerce platforms, email marketing systems, SMS platforms, CRM systems, analytics services, or automation tools.

When an integration is connected, we may receive or send information necessary to provide the requested functionality.

This may include:

• Account identifiers

• Audience or list information

• Customer attributes

• Marketing preferences

• Campaign information

• Conversion events

• Product information

• Order information

• Integration configuration

• Authentication tokens or authorization credentials

The information available to Asmos depends on the permissions granted by the customer and the capabilities of the third-party service.

Your use of third-party services remains subject to their respective privacy policies and terms.

9. Information Collected Through Our Website

When you visit the Asmos website, we may automatically collect certain technical and usage information.

This may include:

• IP address

• Browser

• Device type

• Operating system

• Referring website

• Pages visited

• Time spent on pages

• Website interactions

• Approximate location derived from technical information

• Cookie and similar technology identifiers

We use this information to operate our website, understand usage, improve performance, prevent abuse, and measure marketing effectiveness.

10. Free Tools and Store Analysis

Asmos may provide free tools that allow you to enter a website or store URL to receive conversion recommendations or analysis without creating an account.

When you use these tools, we may process:

• The URL you submit

• Publicly available information from the website

• Analysis results

• Technical usage information

• Information you voluntarily provide

• Your email address if you choose to receive additional results or communications

We may use aggregated insights from these analyses to improve our products, benchmarking, recommendations, and optimization systems.

11. How We Use Information

We may use information to:

• Provide and operate Asmos;

• Create and manage accounts;

• Analyze ecommerce stores and websites;

• Generate conversion experiences;

• Run and evaluate experiments;

• Optimize traffic allocation;

• Generate recommendations and insights;

• Measure conversion performance;

• Provide analytics and reporting;

• Attribute conversions and revenue;

• Connect third-party integrations;

• Process payments and subscriptions;

• Provide customer support;

• Communicate product and account information;

• Improve our Services;

• Develop new features;

• Detect fraud, abuse, and security threats;

• Maintain reliability and performance;

• Comply with legal obligations; and

• Enforce our Terms of Service.

Where required by applicable law, we rely on an appropriate legal basis for processing personal information.

12. Customer Data and Our Role

Depending on the circumstances, Asmos may act as either a data controller or data processor.

When we process information about our own customers, website visitors, prospects, or users for our own business purposes, we generally act as a data controller.

When we process information about an Asmos customer's website visitors or customers on that customer's behalf, we generally act as a data processor or service provider.

The Asmos customer is responsible for determining the purposes and lawful basis for collecting personal information from its visitors and customers.

Where required, our processing of customer data may also be governed by a Data Processing Agreement.

13. How We Share Information

We do not sell personal information in the traditional sense of selling personal data for money.

We may share information with service providers and partners that help us operate Asmos, including providers of:

• Cloud infrastructure

• Databases

• Authentication

• Payment processing

• Analytics

• Artificial intelligence services

• Email delivery

• Customer support

• Security and monitoring

• Communications

• Error tracking

These providers may process information only as necessary to provide services to us and subject to applicable contractual and legal requirements.

We may also disclose information:

• When required by law;

• In response to valid legal process;

• To protect Asmos, our customers, or others;

• To investigate fraud, security incidents, or abuse; or

• In connection with a merger, acquisition, financing, restructuring, or sale of all or part of our business.

14. Aggregated and De-Identified Information

We may create aggregated or de-identified information from data processed through Asmos.

For example, we may analyze aggregated performance patterns to understand which types of conversion experiences generally perform better across industries or audiences.

We may use aggregated or de-identified information to:

• Improve Asmos;

• Develop optimization models;

• Create benchmarks;

• Conduct research;

• Improve recommendations;

• Understand product usage; and

• Develop new features.

We take reasonable measures designed to prevent this information from being used to identify individual persons.

15. Cookies and Similar Technologies

Asmos and our service providers may use cookies, pixels, local storage, SDKs, and similar technologies.

These technologies may be used for:

• Authentication

• Security

• Preferences

• Analytics

• Performance

• Experiment assignment

• Conversion measurement

• Marketing attribution

• Website functionality

Where required by applicable law, non-essential technologies will be used subject to appropriate consent.

Customers using Asmos on their websites are responsible for implementing appropriate cookie notices and consent mechanisms where required.

16. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, complying with legal obligations, resolving disputes, preventing fraud, and enforcing agreements.

Retention periods may vary depending on:

• The type of information;

• Customer configuration;

• Subscription status;

• Legal requirements; and

• Operational requirements.

Information may remain in backups for a limited period after deletion as part of our standard backup and disaster-recovery procedures.

17. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against:

• Unauthorized access

• Loss

• Theft

• Misuse

• Alteration

• Disclosure

• Destruction

However, no internet transmission or storage system can be guaranteed to be completely secure.

Customers are responsible for maintaining the security of their accounts, credentials, integrations, and access permissions.

18. International Data Transfers

Asmos and our service providers may process information in countries other than the country where you or your customers are located.

Where required by applicable law, we use appropriate safeguards for international transfers of personal information.

These safeguards may include contractual protections or other legally recognized transfer mechanisms.

19. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Access your personal information;

• Correct inaccurate information;

• Request deletion;

• Restrict certain processing;

• Object to certain processing;

• Request data portability;

• Withdraw consent where processing is based on consent; and

• Lodge a complaint with an applicable data protection authority.

These rights may be subject to exceptions and limitations under applicable law.

To submit a privacy request relating directly to your Asmos account, contact us at saba@asmos.io.

20. Requests From Visitors of Asmos Customers

If you submitted information through an Asmos-powered experience on another company's website, that company is generally the controller of your information.

For example, if you entered your email address into an Asmos-powered popup on an ecommerce store, you should normally contact that store directly regarding access, deletion, correction, or other privacy requests.

Where appropriate, we assist Asmos customers in responding to valid privacy requests relating to information we process on their behalf.

21. Marketing Communications

We may send product updates, educational content, offers, or other marketing communications where permitted by law.

You may unsubscribe from marketing emails using the unsubscribe mechanism included in those communications.

You may still receive transactional or service-related communications necessary to operate your Asmos account.

22. Children's Privacy

Asmos is intended for businesses and is not directed toward children.

We do not knowingly collect personal information directly from children through the Asmos Service where prohibited by applicable law.

If you believe a child has provided personal information directly to Asmos improperly, please contact us.

23. Third-Party Websites and Services

Our Services may contain links to or integrate with websites and services operated by third parties.

We do not control the privacy practices of those third parties.

We encourage you to review their privacy policies before providing information or connecting their services to Asmos.

24. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to:

• Our Services;

• Our data practices;

• Technology;

• Legal requirements; or

• Business operations.

When we make material changes, we will provide notice where required by applicable law.

The “Last Updated” date at the top of this policy indicates when it was most recently revised.

25. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your personal information, contact us at:

Asmos
Email: saba@asmos.io

For privacy-related requests, please include sufficient information for us to understand and respond to your request.

Effective Date: August 15, 2026