State Privacy Rights Notice: See the State privacy rights notice section below for important information about your rights under applicable U.S. state privacy laws. Aimerce Inc. and our subsidiaries and affiliates ("Aimerce," "we," "us," or "our") provide pixel infrastructure, server-side tracking, and AI-powered analytics for e-commerce brands, primarily merchants on the Shopify platform. This Privacy Policy describes how Aimerce processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy, including our website at https://aimerce.ai/, our associated application(s), and our social media pages, as well as our marketing activities, live events, and other activities described in this Privacy Policy (collectively, the "Service"). Unless otherwise defined in this Privacy Policy, terms used here have the same meaning as in our Terms of Service. A note on our role. This Privacy Policy explains how we handle personal information as a business, including information about visitors to our website, users of the Service, prospective customers, and event attendees. When we process personal information on behalf of a merchant customer in the course of providing the Service (for example, data about that merchant's own shoppers that flows through our tracking infrastructure), we act as that customer's service provider or processor, and that processing is governed by our agreement with the customer, including any applicable data processing agreement, rather than by this Privacy Policy. If you are a shopper interacting with a merchant that uses Aimerce, please refer to that merchant's privacy policy.

Information you provide to us Personal information you may provide to us through the Service or otherwise includes: Contact data, such as your first and last name, email address, billing and mailing addresses, professional title, company name, and phone number. Account data, such as the username and password you set to establish an account on the Service, and other information you add to your account profile. Profile data, such as biographical details and preferences you voluntarily provide. Communications data based on our exchanges with you, including when you contact us through the Service, communicate with us via chat or support features, engage with us on social media, sign up for materials or events, or otherwise reach out to us. Transactional data, such as information relating to or needed to complete your orders, subscriptions, or credit purchases, including order numbers and transaction history. Payment data needed to complete transactions, such as payment card information or bank account details. Payment card information is collected and processed directly by our payment processors, as described below. Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them. Content and input data, such as content, files, prompts, and other data that you upload, generate, transmit, or otherwise make available on the Service, together with associated metadata. Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection. Third-party sources We may combine personal information we receive from you with personal information within the categories above that we obtain from other sources, such as: Public sources, such as public records, social media platforms, and other publicly available sources. Data providers, such as information and sales-intelligence services and data licensors, which we may use to identify and reach prospective business customers. Partners, such as marketing partners, resellers, and event co-sponsors. Service providers that provide services on our behalf or help us operate the Service or our business. Third-party sign-in services that you use to log into or link to your Service account, such as Meta, Google, or Klaviyo. This data may include your username, profile information, and other information associated with your account on that service that is made available to us based on your settings on that service. Business transaction partners. We may receive personal information in connection with an actual or prospective business transaction, such as from an entity we acquire or are acquired by, or from a successor or assignee in a merger, acquisition, sale of assets, or similar transaction, including in the context of an insolvency, bankruptcy, or receivership. Automatic data collection We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service and our communications, such as: Device data, such as your device's operating system type and version, manufacturer and model, browser type, screen resolution, device type, IP address, unique identifiers (including identifiers used for advertising purposes), language settings, network information, and general location information such as city, state, or geographic area inferred from your IP address. Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths, access times and duration, and whether you have opened our emails or clicked links within them. Usage data, such as information about how you use the Service, the number of active users, historical user counts, and similar operational information. Communication interaction data, such as your interactions with our email, text, or other communications, including whether you open or forward emails. We may collect this through pixel tags (also known as clear GIFs), which may be embedded invisibly in our emails. For more information about our automatic collection of data, please see the Tracking and other technologies section below.

Some of our automatic data collection is facilitated by cookies and similar technologies. We will also store a record of your preferences regarding the use of these technologies in connection with the Service. We use chat and artificial intelligence ("AI") technologies to operate certain features of the Service and to communicate with you. As described in the Information about AI models section, we use foundational models provided by third parties such as OpenAI or Anthropic. These and other third parties may access and use information you share through the Service, such as content and prompts you provide, to facilitate the provision of the Service and for the purposes described in this Privacy Policy. We contractually require these providers to maintain appropriate data protection safeguards and do not permit them to use your data for generalized AI model training. For information about your choices with respect to tracking technologies, see the Your choices section of our Cookie Notice.

We may use your personal information for the following purposes or as otherwise described at the time of collection: Service delivery and operations. To provide and operate the Service; create and maintain your account; process payments, subscriptions, and credit purchases; enable security features; communicate with you about the Service, including Service-related announcements, updates, security alerts, and support and administrative messages; communicate with you about events in which you participate; and provide support and respond to your requests, questions, and feedback. Service personalization. To understand your needs and interests, personalize your experience with the Service and our communications, and remember your selections and preferences. Service improvement, research, and analytics. To analyze usage of the Service, conduct user research, improve the Service and our business, understand user activity, and develop new products and services. Marketing and advertising. To send you direct marketing communications, newsletters, and promotional materials, which we may personalize based on your interests; and, where applicable, to work with our service providers and advertising partners to deliver ads that we or they think will interest you. You may opt out of our marketing communications as described in the Your choices section below. Events and promotions. To administer and communicate with you about events, promotions, or surveys in which you participate, and to contact or market to you after collecting your personal information at an event. Compliance and protection. To comply with applicable laws, lawful requests, and legal process; protect our, your, or others' rights, privacy, safety, or property, including by making and defending legal claims; audit our internal processes for compliance; enforce the terms that govern the Service; and prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft. To create aggregated, de-identified, or anonymized data. We may create aggregated, de-identified, or anonymized data from personal information and use it, and share it with third parties, for our lawful business purposes, including analyzing and improving the Service and promoting our business. We do not attempt to re-identify such data except to test whether our de-identification processes comply with applicable law. Further uses. Where we intend to use your personal information for a purpose that is not compatible with the purpose for which it was collected, we will ask for your consent as required by applicable law.

We generally retain personal information to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention. To determine the appropriate retention period, we may consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, and applicable legal requirements. Uploaded content and data may be retained for the duration of your use of the Service. When we no longer require the personal information we have collected, we may delete it, anonymize it, or isolate it from further processing.

We may share your personal information with the following parties, or as otherwise described in this Privacy Policy or at the time of collection: Affiliates, including our corporate parent, subsidiaries, and affiliated companies. Managed accounts and administrators. If you have an Aimerce account associated with your organization's email address or under an organization's subscription, we may share your personal information with that organization and its administrators. Service providers that provide services on our behalf or help us operate the Service or our business, such as hosting, information technology, customer support, AI providers (including providers of generative AI technologies such as OpenAI), email delivery, marketing, research, and website analytics. Payment processors. Payment card information you use to make a purchase is collected and processed directly by our payment processors, such as Stripe. Stripe may use your payment data in accordance with its privacy policy at https://stripe.com/privacy. Partners and resellers, including third parties with whom we partner to provide sales, consulting, support, or technical services, co-sponsor events or promotions, or jointly offer products or services. Advertising partners. Where applicable, third-party advertising companies for the interest-based advertising purposes described above. Third parties designated by you, where you have instructed us or provided your consent to share your information, including linked third-party services you connect to your Service account. The third party's use of shared information will be governed by its own privacy policy and your account settings with that service. Professional advisors, such as lawyers, auditors, bankers, and insurers, in the course of the professional services they render to us. Authorities and others, such as law enforcement, government authorities, and private parties, where we believe in good faith it is necessary or appropriate for the compliance and protection purposes described above. Business transferees. We may disclose personal information in the context of an actual or prospective business transaction, such as an investment in Aimerce, a financing, or the sale, transfer, or merger of all or part of our business, assets, or shares, and in the event of an insolvency, bankruptcy, or receivership.

Access or update your information. If you have registered for an account, you may review and update certain account information by logging in. Opt out of communications. You may opt out of marketing-related emails by following the unsubscribe instructions at the bottom of the email, or by contacting us. If you opt out of marketing emails, you may continue to receive service-related and other non-marketing messages. Cookies and other technologies. For information about cookies and other technologies used by the Service and how to control them, see our Cookie Notice. AI data sharing. As described in the Information about AI models section, if you wish to opt out of data sharing with third-party AI models, please email us at support@aimerce.ai. Blocking images and clear GIFs. Most browsers and devices allow you to configure your device to prevent images from loading. To do this, follow the instructions in your browser or device settings. Do Not Track. Some browsers can be configured to send "Do Not Track" signals. We currently do not respond to "Do Not Track" signals, but we honor Global Privacy Control signals where required by law, as described in the State privacy rights notice section. Declining to provide information. We need to collect certain personal information to provide the Service. If you do not provide information we identify as required, we may not be able to provide those services. Linked third-party platforms. If you connect to the Service through a third-party platform, you may be able to use your settings on that platform to limit the information we receive. Revoking our access will not apply to information we have already received. Delete your content or close your account. You can delete certain content through your account. To request to close your account, please contact support@aimerce.ai.

The Service may contain links to websites, applications, and other online services operated by third parties, and our content may be integrated into pages or services not associated with us. These links and integrations are not an endorsement of, or a representation that we are affiliated with, any third party. We do not control third-party services and are not responsible for their actions. We encourage you to read the privacy policies of the other services you use.

We implement reasonable technical, organizational, and physical safeguards designed to protect the personal information we collect from unauthorized access, disclosure, alteration, or destruction. However, security risk is inherent in all internet and information technologies, and no method of transmission or storage is completely secure. We cannot guarantee the security of your personal information. Service providers that assist us may access your personal information only to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.

We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country. Legal bases for processing (EEA, UK, and Switzerland). If you are in the European Economic Area, the United Kingdom, or Switzerland, we collect and process your personal information on the following legal bases: - Performance of a contract: to provide the Service you have subscribed to. - Legitimate interests: for our legitimate interests, such as improving our products and services, securing the Service, and marketing to businesses, where those interests are not overridden by your rights. - Consent: where you have given consent for specific purposes. You may withdraw your consent at any time. - Legal obligation: where processing is necessary to comply with a legal obligation.

The Service is not intended for use by anyone under 18 years of age, and we do not knowingly collect personal information from children. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information from a child without the consent required by law, we will take steps to delete the information.

Third-party AI models. We utilize foundational models provided by third parties, including OpenAI. These models assist with various functionalities of the Service to enhance the user experience and improve service delivery. Data shared with AI models. We may share content and data you provide, including data or content you upload or prompts you enter while using the Service, with these AI models. Purpose of sharing. Data shared with AI models is used to provide relevant and personalized service recommendations, facilitate efficient and effective data querying, and enhance the overall user experience. User control and opt-out. Before we share your data with third-party AI models, we will obtain your consent so that you are informed about the purpose of the sharing and retain control over your personal information. If you wish to opt out of data sharing with third-party AI models, please email us at support@aimerce.ai. Responsible use. We are committed to the responsible and ethical use of data. We implement data handling and privacy practices, periodically review our AI model usage, work to comply with relevant data protection regulations, and monitor our practices to uphold ethical standards.

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the effective date of this Privacy Policy and posting it on the Service or by other appropriate means. Changes are effective upon posting the modified version, or as otherwise indicated at the time of posting. Your use of the Service after the effective date of any modified Privacy Policy indicates that the modified Privacy Policy applies to your interactions with the Service and our business.

If you have questions about our practices or would like to exercise any privacy right available to you, please contact us: - Email: support@aimerce.ai - Mail: 95 Third Street 2nd Floor, PMB 3349, San Francisco, CA 94103

Except as otherwise provided, this section applies to residents of U.S. states to the extent they have privacy laws applicable to us that grant their residents the rights described below (collectively, the "State Privacy Laws"). This section describes how we collect, use, and share personal information of residents of these states and the rights those residents may have. Not all rights listed below are afforded to all users, and if you are not a resident of a covered state, you may not be able to exercise these rights. We may be unable to process your request if you do not provide sufficient detail to allow us to confirm your identity or understand and respond to it. For purposes of this section, "Personal Information" has the meaning given to "personal data," "personal information," or similar terms, and "Sensitive Personal Information" has the meaning given to "sensitive personal information," "sensitive data," or similar terms, in the State Privacy Laws, except that neither term includes information exempted from the scope of those laws. Your privacy rights. The State Privacy Laws may provide residents with some or all of the rights listed below. These rights are not absolute, and we may decline a request in certain cases as permitted by law. - Information. You can request information about how we have collected and used your Personal Information, including the categories of Personal Information collected, the categories of sources, the business or commercial purposes for collecting or selling it, the categories of third parties with whom we share it, and the categories of Personal Information disclosed or sold for a business purpose. - Access. You can request a copy of the Personal Information we have collected about you. - Correction. You can ask us to correct inaccurate Personal Information we have collected about you. - Deletion. You can ask us to delete the Personal Information we have collected from you. - Appeal. You can appeal our denial of any validly submitted request. - Opt out of targeted advertising. You can opt out of processing of your Personal Information for targeted advertising purposes. - Opt out of sales. You can opt out of sales of your Personal Information. - Profiling and automated decision-making. We do not use your Personal Information to engage in profiling or automated decision-making that produces legal or similarly significant effects concerning you. - Sensitive Personal Information. While we may collect certain categories of Sensitive Personal Information, such as account log-in credentials, we do not process Sensitive Personal Information for the purpose of inferring characteristics about you. - Nondiscrimination. You are entitled to exercise these rights free from discrimination as prohibited by the State Privacy Laws. Consumers under 16. We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age. Exercising your right to opt out of the sale or sharing of your Personal Information. We do not sell Personal Information for money. Like many companies, we may use services that help deliver interest-based ads. The State Privacy Laws may classify some of these uses as "selling" or "sharing" your Personal Information with advertising partners. You can submit requests to opt out of tracking for targeted advertising or other sales via email to support@aimerce.ai, or by broadcasting the Global Privacy Control ("GPC") signal. We honor GPC signals as valid opt-out requests for the sale or sharing of Personal Information, as required by applicable law. When we detect a GPC signal from your browser, we will treat it as a request to opt out of the sale or sharing of your Personal Information. Verification of identity; authorized agents. We may need to verify your identity to process your requests and may confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, or other information, where permitted by law. Under some State Privacy Laws, you may enable an authorized agent to make a request on your behalf. We may need to verify your agent's identity and authority, which may include requiring a copy of a valid power of attorney or other written and signed permission. Information practices (current and during the past 12 months). We collect the categories of Personal Information described in the "Personal information we collect" section from the sources, and use them for the purposes, described in this Privacy Policy. The criteria we use to decide how long to retain Personal Information is described in the Retention section. We do not attempt to re-identify de-identified information except to test whether our de-identification processes comply with applicable law. Personal Information we collect, use, and disclose. The following chart summarizes the Personal Information we collect, mapped to the categories in the CCPA (Cal. Civ. Code section 1798.140), the purposes for which we collect it, and the categories of third parties to whom we disclose it. This chart describes our practices currently and during the 12 months preceding the effective date. Additional information for California residents. Under California's Shine the Light law (California Civil Code Section 1798.83), California residents who have a business relationship with us primarily for personal, family, or household purposes may request the names of third parties to which we disclosed certain personal information during the preceding calendar year for those third parties' own direct marketing purposes, and the categories of personal information disclosed. You may send such requests to support@aimerce.ai with the statement "Shine the Light Request" and your first and last name and mailing address, and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency, and we do not accept these requests by telephone, mail, or facsimile. Additional information for Nevada residents. Nevada residents have the right to opt out of the sale of certain personal information for monetary consideration. While we do not currently engage in such sales, if you are a Nevada resident and would like to submit a request regarding any potential future sales, please email support@aimerce.ai. Additional information for Texas residents. To the extent we "sell" or "share" your sensitive personal data as defined by the Texas Data Privacy and Security Act, we do so only as described in this section, such as through services that help deliver interest-based ads. Contact us. If you have questions or concerns about our privacy policies or information practices, please contact us using the details in the How to contact us section above.