← Back to Login

Privacy Policy

Last updated: January 2025

CROMULTY by Search Leads ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our conversion rate optimization and A/B testing platform ("the Service").

1. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Password (stored securely using one-way hashing)
  • Organization name

Visitor Tracking Data

When the CROMULTY tracking script is installed on your website, it collects data from your website visitors to power A/B testing and analytics:

  • Page views — URLs visited, referrer URLs, page titles
  • Click events — element interactions and click coordinates
  • Conversion events — goal completions and conversion values
  • IP addresses — used for geolocation and fraud detection
  • User agents — browser type, operating system, and device information
  • Cookies and local storage — used for visitor identification and session tracking

2. How We Use Your Data

We use the collected information to:

  • Assign visitors to A/B test variants consistently
  • Track conversions and measure test performance
  • Generate analytics reports and statistical analysis
  • Maintain and improve the Service
  • Communicate with you about your account and service updates
  • Ensure security and prevent abuse

3. Cookies and Tracking Technologies

CROMULTY uses the following cookies and browser storage mechanisms. For full details, see our Cookie Policy.

  • cromulty_visitor — Stores visitor identification data (localStorage)
  • cromulty_vid — Visitor identification cookie (1-year expiry)
  • cromulty_session — Session tracking data (sessionStorage)
  • PHPSESSID — Platform session management
  • _csrf_token — Cross-site request forgery protection (session-based)

4. Data Retention

  • Tracking data (page views, clicks, conversions) is retained for 2 years from the date of collection, after which it is automatically purged.
  • Account data is retained for as long as your account remains active. Upon account deletion, personal data is removed within 30 days.
  • Aggregated and anonymized data may be retained indefinitely for statistical purposes.

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right of Access — Request a copy of the personal data we hold about you.
  • Right to Correction — Request correction of inaccurate or incomplete data.
  • Right to Deletion — Request deletion of your personal data, subject to legal obligations.
  • Right to Data Portability — Request your data in a structured, machine-readable format.
  • Right to Restrict Processing — Request that we limit how we process your data.
  • Right to Object — Object to our processing of your data in certain circumstances.

To exercise any of these rights, please contact us at support@cromulty.com. We will respond within 30 days.

6. Third-Party Services

We use the following third-party services in connection with the platform:

  • OpenRouter — Used to power AI-driven features such as content suggestions and variant generation. Data sent to OpenRouter is processed in accordance with their privacy policy and is not used to train models.

We do not sell or rent your personal data to third parties. We do not share your data with third parties for their own marketing purposes.

7. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (TLS/SSL), secure password hashing, CSRF protection, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. GDPR Compliance

If you are located in the European Economic Area (EEA), we process your personal data in accordance with the General Data Protection Regulation (GDPR). Our lawful bases for processing include:

  • Contractual necessity — Processing required to provide the Service.
  • Legitimate interest — Analytics and service improvement.
  • Consent — Where you have provided explicit consent.

You have the right to lodge a complaint with a supervisory authority in your member state.

9. CCPA Compliance

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

  • The right to know what personal information we collect, use, and disclose.
  • The right to request deletion of your personal information.
  • The right to opt out of the sale of your personal information. We do not sell personal information.
  • The right to non-discrimination for exercising your privacy rights.

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: support@cromulty.com
Service: CROMULTY by Search Leads