ASO Signals and your personal data
emonster, inc. operates ASO Signals. The current service is a public launch waitlist and restricted development application. Our privacy contact is [email protected]. An Apple account connection, customer analytics workspace, or paid subscription is not created by joining the waitlist.
The information we use and why
We use your contact address, language, signup history and recorded notice/choice versions to administer the waitlist, send a receipt and requested launch updates, manage preferences, and notify an authorized administrator. Optional product news and offers require a separate choice.
Optional browser and acquisition context is collected only when allowed. Separately, transient IP processing supports abuse checks and IPinfo country/continent lookup. Coarse information supports aggregate demand reporting. Google/Firebase identity and session data protect the restricted development application. Support inquiries contain the information you choose to send.
Consent and communication choices
Terms acceptance, a waitlist request, optional marketing, and optional analytics are distinct. Accepting Terms or authorizing an Apple connection is not blanket GDPR consent.
Use the marketing-unsubscribe link to stop product news and offers. Contact [email protected] to leave the launch list, request removal, or discuss previously stored information. Privacy settings changes this browser’s choice for future submissions; it does not delete earlier server data. Withdrawal of consent does not affect earlier lawful processing.
Providers, recipients, and international processing
Cloudflare handles public-site request delivery and network protection. Google and Firebase provide hosting, backend storage and functions, restricted authentication, secret storage and reCAPTCHA Enterprise. Resend processes email addresses, message content, delivery information and provider events. IPinfo receives the transient IP used for approximate country and continent lookup. Authorized administrators receive signup notifications.
Providers may process technical logs beyond the limited signup fields retained by ASO Signals. Email-provider tracking is separate from browser analytics preferences. Information may be processed in the United States and other countries outside the EEA. Contact our privacy team for information about locations and applicable transfer safeguards.
Retention and security
Signup expiry is 24 months from original registration; repeat submissions do not restart it. Abuse records expire within 24 hours. Demand aggregates omit contact addresses, suppress groups below 10, and expire after 36 months. Database TTL deletion happens asynchronously. These periods do not describe every provider log, support record, or backup.
Private persistence, restricted identities, keyed record identifiers and bounded requests help protect the service. No storage or transmission method is completely secure. You can request removal before expiry through our privacy contact.
Your rights under the GDPR
- Access your personal data and information about its processing, and request correction of inaccurate information.
- Request erasure or restriction where the conditions in the GDPR are met.
- Object to processing based on legitimate interests where applicable, and object to direct marketing at any time.
- Receive qualifying data you provided in a portable format where processing is automated and based on consent or contract.
- Withdraw consent where processing relies on it, without affecting the lawfulness of processing before withdrawal.
- Exercise applicable protections regarding decisions based solely on automated processing that have legal or similarly significant effects.
Make a privacy request
Email [email protected] and identify the ASO Signals request and information concerned. We may need proportionate information to verify your identity. Do not send passwords or Apple API keys.
The GDPR requires action without undue delay, normally within one month of receipt. Where permitted because of complexity or number of requests, the period may be extended by up to two further months, with reasons communicated within the first month. Its rules also govern any refusal or charge.
Supervisory authorities and further information
You may complain directly to a competent data protection authority, particularly where you habitually live or work or where an infringement is alleged. Contacting emonster first is not required.