Privacy Policy

This Privacy Policy explains how ASOFAST collects, uses, and protects your information when you use our website and service (the "Service"). ASOFAST is operated by DHA STUDIO LLC, a company organized under the laws of Wyoming, United States, with a registered address at 30 N Gould St, STE R, Sheridan, WY 82801, USA ("ASOFAST", "we", "us", or "our"). By using the Service, you agree to the practices described in this policy.

1. Information we collect

We collect the following categories of data:

• Account information. Your email address and password. Passwords are stored in hashed form by our authentication provider, and we never see them in plain text.
• Billing information. Payments are processed by Stripe. We do not store your full card number. We keep a Stripe customer identifier and a record of your purchases.
• Store credentials. When you connect an Apple App Store Connect or Google Play account, you provide API credentials (such as an Apple .p8 private key, Key ID and Issuer ID, or a Google service account key). These are encrypted at rest and are never displayed back to you or any other user.
• App and content data. The app details, keywords, descriptions, translations, and screenshots that you submit or that the Service generates for you.
• Usage data. Technical information such as your IP address, browser and device type, pages viewed, and actions taken in the app, collected through our analytics provider.

2. How we use your information

• To provide, operate, and maintain the Service.
• To generate ASO copy, translations, and marketing screenshots that you request.
• To process payments and manage your credit balance.
• To publish or update your store listings when you instruct us to do so.
• To send transactional messages, such as account, security, and purchase notifications.
• To secure the Service, prevent fraud and abuse, and comply with our legal obligations.
• To analyze usage and improve the Service.

3. AI processing

To generate listings, translations, and screenshots, we send the app details and keywords you provide to our AI provider (OpenAI), which processes them to produce the requested output. We do not use your content to train our own models.

4. Service providers

We share data with trusted providers who process it on our behalf, only as needed to run the Service:

• Supabase: database, authentication, and file storage.
• Stripe: payment processing.
• Resend: transactional email delivery.
• OpenAI: AI content generation.
• PostHog: product analytics.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

5. International data transfers

Our providers may store and process your information in the United States and in other countries where they operate. By using the Service, you understand that your information may be transferred outside your country of residence. Where required, transfers are made under appropriate safeguards such as Standard Contractual Clauses.

6. Cookies and analytics

We use strictly necessary cookies to keep you signed in and to secure your session. We also use analytics cookies and similar technologies (via PostHog) to understand how the Service is used and to improve it. You can control cookies through your browser settings.

7. Data retention

We keep your personal data for as long as your account is active or as needed to provide the Service. After you close your account, we delete or anonymize your data within a reasonable period, except where we must keep it to meet legal, accounting, or security obligations.

8. Security

We protect your data with encryption in transit (TLS) and access controls. Sensitive store credentials are encrypted at rest using AES-256-GCM and can be decrypted only by our servers, never by other users. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

You may request to access, correct, delete, or export your personal data, and you may object to or restrict certain processing. If you are a California resident, you have the right to know, delete, and correct your personal information, and to opt out of the sale or sharing of personal information (we do not sell or share it). If you are in the European Economic Area or the United Kingdom, you have additional rights under the GDPR, including access, rectification, erasure, restriction, portability, and objection. To exercise any of these rights, contact us at contact@asofast.app.

10. Children

The Service is not directed to children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page. Your continued use of the Service after changes take effect means you accept the updated policy.

12. Contact us

For any question about this policy or your data, contact us at contact@asofast.app. You can also review our Terms of Service.