Privacy Policy

Last updated: May 12, 2026

This Privacy Policy describes how ABTestly ("ABTestly", "we", "us", or "our") collects, uses, stores, and shares personal information when you use our website at abtestly.com, our dashboard, our API, and our snippet that runs on customer websites (collectively, the "Service").

We take your privacy seriously. This policy explains what we do with your data and your rights regarding that data. If you have questions, contact us at privacy@abtestly.com.

1. Who we are

ABTestly is operated as an independent software service. We are the data controller for personal data collected about you when you sign up for our Service.

When our customers use ABTestly to run experiments on their own websites, they act as the data controller for their end-users' data. ABTestly acts as a data processor in that relationship. See Section 9 for more details.

Contact:

EU/UK Representative under Article 27 GDPR:

For customers and users located in the European Union or the United Kingdom, our appointed representative can be contacted at privacy@abtestly.com. Representative details will be published here once finalized.

2. Information we collect

2.1 Information you provide to us

When you sign up and use ABTestly, we collect:

2.2 Information we collect automatically

When you use our dashboard or API, we collect:

2.3 Information collected by our snippet on customer websites

When our customers install the ABTestly snippet on their websites, the snippet collects the following information about their end-users:

The snippet does NOT collect:

Our customers are responsible for obtaining appropriate consent from their end-users before deploying the snippet, in accordance with applicable laws including GDPR, UK GDPR, ePrivacy Directive, CCPA, and similar regulations.

3. How we use information

We use the information we collect for the following purposes:

4. Legal bases for processing (GDPR)

If you are located in the European Union, the United Kingdom, or other regions with similar laws, we rely on the following legal bases:

5. How we share information

We do not sell your personal information. We share information only as described below:

5.1 Service providers (sub-processors)

We use the following third-party services to operate ABTestly. Each has its own privacy policy and data handling practices:

We may add or change sub-processors over time. Material changes to our sub-processor list will be reflected in updates to this policy.

5.2 Legal requests

We may disclose information if required by law, regulation, or valid legal process, including responding to subpoenas, court orders, or government requests. We will notify affected users where legally permitted.

5.3 Business transfers

If ABTestly is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership.

5.4 Aggregated or de-identified data

We may share aggregated or de-identified data that cannot reasonably be used to identify you for any purpose.

6. International data transfers

ABTestly is operated from Bangladesh. Our service providers operate in various countries including the United States, the United Kingdom, and the European Union. By using our Service, your information may be transferred to, stored, and processed in countries outside of your country of residence, including countries that may have different data protection standards than your country.

For transfers from the EU/UK to countries that have not received an adequacy decision, we rely on Standard Contractual Clauses approved by the European Commission or equivalent safeguards.

7. Data retention

We retain personal information for as long as necessary to provide the Service and comply with legal obligations:

8. Your rights

Depending on where you live, you may have the following rights regarding your personal information:

For users in California (CCPA/CPRA), you have additional rights to know what categories of personal information we collect, the sources, the business purposes, and the categories of third parties with whom we share information. We do not sell personal information.

To exercise any of these rights, email privacy@abtestly.com. We will respond within 30 days (or sooner if required by applicable law).

9. Customers as data controllers

When our customers install the ABTestly snippet on their websites, they determine what experiments to run, what data to collect about their end-users, and how to comply with applicable laws. In this relationship:

If you are an end-user of a customer's website and have questions about how your data is being used, please contact the website owner directly. ABTestly cannot identify or contact you on the customer's behalf.

10. Cookies and tracking technologies

We use cookies and similar technologies for the following purposes:

On customer websites, our snippet sets the following storage entries on end-users' browsers:

End-users can disable or delete these by clearing their browser's cookies and localStorage. Customers using ABTestly should disclose these in their own privacy policies.

11. Security

We implement reasonable technical and organizational measures to protect your information, including:

No security measure is perfect. If we become aware of a data breach affecting your personal information, we will notify you and applicable regulators as required by law.

12. Children's privacy

ABTestly is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, contact us at privacy@abtestly.com and we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website at least 30 days before they take effect. The "Last updated" date at the top of this policy reflects the most recent revision.

14. Contact us

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

For complaints in the EU, you may contact your local Data Protection Authority. For the UK, the Information Commissioner's Office (ico.org.uk).