Privacy Policy

1. Introduction

Welcome to Segmently ("Company," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our A/B testing and website optimization platform, including our website, services, and applications (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us when you:

• Register for an account (name, email address, organization name, password)
• Subscribe to our services (billing information, payment details)
• Contact our support team (support inquiries, feedback, correspondence)
• Participate in surveys or promotional activities
• Configure experiments and targeting rules on our platform

2.2 Information Automatically Collected

When you access our Services, we automatically collect certain information, including:

• Device Information: Browser type, operating system, device identifiers, IP address
• Usage Data: Pages visited, features used, time spent on pages, click patterns
• Technical Data: Access times, referral URLs, error logs, performance metrics
• Cookies and Tracking Technologies: Session identifiers, authentication tokens, preference settings

2.3 End-User Data (Your Website Visitors)

When you implement our tracking snippet on your website, we collect limited data about your end-users for the purpose of delivering A/B testing functionality:

• Anonymous Visitor IDs: Randomly generated identifiers to ensure consistent experiment assignment
• Page URLs: URLs where experiments are running (for targeting purposes)
• Device Type: Desktop, mobile, or tablet (for device-based targeting)
• Event Data: Conversion events and custom events you configure
• Experiment Assignment: Which variant of an experiment was shown to a visitor

Important: We do NOT collect or store personally identifiable information (PII) about your end-users, including names, email addresses, phone numbers, or precise geolocation data. We use first-party cookies on your domain, not third-party tracking cookies.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our A/B testing platform and related services
• Account Management: To create and manage your account, authenticate your identity, and process payments
• Experiment Execution: To assign visitors to experiment variants, track conversions, and generate analytics
• Customer Support: To respond to your inquiries, provide technical assistance, and resolve issues
• Security: To detect, prevent, and address technical issues, fraud, and security vulnerabilities
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests
• Communications: To send you service-related announcements, updates, security alerts, and administrative messages
• Marketing: With your consent, to send you promotional materials, newsletters, and offers (you may opt-out at any time)
• Analytics: To understand how our Services are used and to improve user experience
• Research and Development: To develop new features, products, and services

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or your end-users' data to third parties for their marketing purposes.

4.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Services, including:

• Cloud Infrastructure Providers: For hosting and data storage (e.g., Fly.io, Vercel, Neon)
• Payment Processors: For billing and payment processing (e.g., Stripe)
• Email Service Providers: For transactional and marketing emails
• Analytics Providers: For internal analytics and service improvement
• Customer Support Tools: For providing technical support and customer service

These service providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• Compliance with legal obligations, court orders, or subpoenas
• Protection of our rights, property, or safety, or that of our users or the public
• Investigation of potential violations of our Terms of Service
• Detection, prevention, or addressing fraud, security, or technical issues

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website of any change in ownership or use of your personal information.

5. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction, including:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
• Access Controls: Strict access controls and authentication mechanisms to limit access to authorized personnel
• Password Protection: Passwords are hashed using bcrypt with industry-standard cost factors
• Secure Infrastructure: Data is stored in secure, encrypted data centers with strict access controls
• Regular Audits: Periodic security audits and vulnerability assessments
• Incident Response: Documented procedures for detecting and responding to security incidents

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Data: Retained while your account is active and for up to 90 days after account deletion
• Experiment Data: Retained according to your plan's data retention period (3-365 days, depending on subscription tier)
• Billing Records: Retained for 7 years for tax and accounting purposes
• Support Communications: Retained for 2 years for quality assurance and legal compliance
• Logs and Technical Data: Retained for 90 days for security and troubleshooting purposes

Upon request, we will delete or anonymize your personal information, unless we are legally required to retain it.

7. Your Rights and Choices

7.1 Access and Correction

You have the right to access, update, or correct your personal information at any time through your account settings or by contacting us at privacy@segmently.com.

7.2 Data Portability

You have the right to request a copy of your data in a structured, machine-readable format. We will provide your data within 30 days of your request.

7.3 Account Deletion

You may delete your account at any time through your account settings. Upon deletion, we will remove or anonymize your personal information within 90 days, except where retention is required by law.

7.4 Marketing Communications

You may opt-out of receiving promotional emails by clicking the "unsubscribe" link in any marketing email or by updating your communication preferences in your account settings. You cannot opt-out of service-related communications (e.g., account verification, security alerts).

7.5 Cookies

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Services.

7.6 Do Not Track

Our Services do not respond to "Do Not Track" signals. However, we provide privacy-first A/B testing that does not use third-party tracking cookies or collect personally identifiable information about your end-users.

8. International Data Transfers

Our Services are operated in the United States. If you are located outside the United States, please be aware that information we collect will be transferred to, processed, and stored in the United States.

By using our Services, you consent to the transfer of your information to the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country of residence.

We implement appropriate safeguards to protect your information in accordance with this Privacy Policy, including Standard Contractual Clauses (SCCs) approved by the European Commission for transfers of personal data to countries outside the European Economic Area.

9. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: You can request confirmation of whether we process your personal data and obtain a copy
• Right to Rectification: You can request correction of inaccurate or incomplete personal data
• Right to Erasure: You can request deletion of your personal data under certain circumstances
• Right to Restriction: You can request restriction of processing under certain circumstances
• Right to Data Portability: You can request your data in a portable format
• Right to Object: You can object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority

Legal Basis for Processing: We process your personal data based on the following legal grounds:

• Performance of a contract (when providing Services to you)
• Compliance with legal obligations
• Legitimate interests (fraud prevention, security, service improvement)
• Consent (for marketing communications and optional features)

10. CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to Know: You can request disclosure of the categories and specific pieces of personal information we collect
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt-out of the "sale" of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your CCPA rights

To exercise these rights, please contact us at privacy@segmently.com or call us at 424-257-4617. We will verify your identity before processing your request.

11. Children's Privacy

Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at privacy@segmently.com. We will take steps to delete such information from our systems.

12. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services before providing them with your information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Notify you via email (if you have an account with us)
• Display a prominent notice on our website
• Request your consent if required by applicable law

Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated Privacy Policy, you must stop using our Services.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you may also contact your local data protection authority.