Privacy Policy

Section 1

Who We Are

• Legal name: Bit Bytes Solutions LLC
• Trade name: Augmmerce®
• Registered address: State of New Mexico, United States
• Privacy contact: [email protected]
• Website: augmmerce.com

Section 2

Information We Collect

2.1 Information You Provide Directly

When you register, request a demo, or subscribe to a plan, we may collect:

• Full name and company name
• Email address
• Phone number (including WhatsApp)
• Your online store URL
• Billing information (processed by third parties — see Section 5)
• Platform login credentials (username and encrypted password)
• 3D models and digital assets you upload to the platform

2.2 Automatically Collected Information

When you browse our website or use the platform, we may automatically collect:

• IP address and approximate geographic location
• Device type, operating system, and browser
• Pages visited, session duration, and usage patterns
• Meta Pixel data: visit events and on-site behavior for advertising measurement
• AR widget performance data embedded in your store: 3D product views, AR activations, viewer session duration, and an anonymous session ID for the end buyer (not linkable to an identifiable person)

2.3 Information We Do NOT Collect from the AR Viewer

When end buyers in your store use the augmented reality viewer, the device camera is used exclusively in a local, on-device manner to render the AR experience. Augmmerce does NOT capture, transmit, store, or have access to any image, video, or data from the end user's camera.

Section 3

How We Use Your Information

We use the information collected for the following purposes:

• Create and manage your account on the platform
• Process payments and manage your subscription
• Provide technical support and onboarding
• Send service-related communications (updates, changes, incidents)
• Send commercial and marketing communications (you may unsubscribe at any time)
• Analyze platform usage to improve our Services
• Comply with legal obligations and prevent fraud

Section 4

Cookies and Tracking Technologies

We use cookies and similar technologies in different contexts. Below we detail each type by origin and purpose.

4.1 Cookies on augmmerce.com (marketing site and platform)

These cookies are activated when you visit augmmerce.com or platform.augmmerce.com:

Strictly necessary cookies

• User session: keep you logged into the management platform
• Preferences: remember language and display settings

Analytics and performance cookies

• Google Analytics (via Google Tag Manager): measures site traffic in an aggregated, anonymous way — without identifying individual users. You can opt out at tools.google.com/dlpage/gaoptout

Advertising cookies

• Meta Pixel (Facebook/Instagram Ads): records site visits and events to measure the effectiveness of our advertising campaigns on Meta and show you relevant ads. Data is processed according to Meta's Data Policy (facebook.com/privacy/policy). You can manage your preferences at facebook.com/ads/preferences

4.2 AR Widget Cookies on Your Clients' Stores

When the Augmmerce AR widget is active on an online store, first-party cookies and local storage mechanisms are used for the following purposes:

3D model usage statistics

• We collect interaction metrics: 3D product views, AR activations, viewer session duration, device type and browser
• We associate these metrics with a randomly generated anonymous session ID that cannot be linked to the identity of the end buyer
• We do not collect the end buyer's name, email, address, or any personally identifiable information

Use of this data

• Client dashboard: metrics are displayed in real time in each store's admin panel so the e-commerce operator can evaluate AR product performance
• Augmmerce internal analytics: we use aggregated data to improve platform performance, optimize models, and develop new features

The AR widget does not install advertising or third-party tracking cookies on your clients' stores. Its sole purpose is to power the viewer and collect Augmmerce's own usage statistics.

4.3 Cookie Controls

You can manage or reject cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the management platform. For more information on managing cookies, visit aboutcookies.org.

Section 5

Sharing Information with Third Parties

We do not sell or transfer your personal information to third parties for advertising purposes. We do share data with the following service providers, only to the extent necessary to operate:

5.1 Payment Processors

Payment data is processed directly by certified platforms. Augmmerce does not store credit card data or complete financial information:

• Stripe (stripe.com) — privacy policy available at stripe.com/privacy
• MercadoPago (mercadopago.com) — policy available at mercadopago.com
• Mobbex (mobbex.com) — policy available at mobbex.com

5.2 Infrastructure and Analytics

• Google Analytics / Google Tag Manager — website usage tracking
• Hosting and cloud providers (servers located in the United States and Brazil)

5.3 Legal Disclosures

We may disclose personal information when required by law, court order, or to protect the rights, safety, and property of Augmmerce, its customers, or the public.

Section 6

Data Retention

We retain your personal information for as long as your account is active or as necessary to provide the Services.

Upon cancellation of your plan:

• Your account and profile data are deactivated immediately
• Your 3D models, digital assets, and product configurations are retained for 30 days from the cancellation date, so you can recover them if needed
• After 30 days, your data is permanently deleted from our servers
• Billing records may be retained for as long as required by applicable tax and accounting regulations

Section 7

Information Security

We implement reasonable technical and organizational measures to protect your information, including:

• Password and sensitive data encryption
• Restricted access to personal information, limited to authorized personnel only
• Encrypted connections via HTTPS/TLS

However, no security system is infallible. Internet use involves inherent risks and we cannot guarantee the absolute security of your information.

Section 8

Your Rights

Depending on your country of residence, you may exercise the following rights over your personal information:

• Access: request a copy of the data we hold about you
• Rectification: correct inaccurate or incomplete information
• Erasure: request deletion of your personal information
• Portability: receive your data in a structured, machine-readable format
• Objection or restriction: object to the processing of your data in certain cases
• Withdrawal of consent: withdraw your consent to marketing communications at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 business days.

Section 9

Applicable Privacy Regulations

Since we provide services primarily in Latin America and operate under U.S. law, we acknowledge and respect the most relevant privacy frameworks for our users. Below are the applicable laws by country:

9.1 Countries with a specific data protection law in force

• Argentina — Law No. 25,326 on Personal Data Protection
• Brazil — Lei Geral de Proteção de Dados (LGPD, Law 13,709/2018)
• Mexico — Federal Law on Protection of Personal Data Held by Private Parties
• Colombia — Law 1581 of 2012 on Personal Data Protection. Supervisory authority: Superintendencia de Industria y Comercio (SIC)
• Costa Rica — Law No. 8,968 on Protection of Individuals regarding the Processing of their Personal Data (2011). Supervisory authority: PRODHAB
• Panama — Law 81 of 2019 on Personal Data Protection, regulated by Executive Decree 285/2021. Supervisory authority: ANTAI
• Uruguay — Law No. 18,331 on Personal Data Protection and Habeas Data (2008). Supervisory authority: URCDP

9.2 Countries with approved laws in transition (not yet fully in force)

• Chile — Law 21,719 published December 13, 2024, with deferred enforcement from December 1, 2026. Replaces Law 19,628. Creates the Agencia de Protección de Datos Personales
• Paraguay — Law No. 7,593/2025 on Personal Data Protection, enacted November 27, 2025, with enforcement from November 2027. First comprehensive data protection law in the country

9.3 International frameworks

• General Data Protection Regulation (GDPR) — European Union (for EU users)
• Children's Online Privacy Protection Act (COPPA) — United States

The law governing this Policy is that of the State of New Mexico, United States, without prejudice to the rights granted to you by the laws of your own country.

Section 10

Minors

Augmmerce Services are intended for businesses and professionals aged 18 and over. We do not knowingly collect personal information from children under 13. If we discover that we have received data from a minor without parental or guardian consent, we will delete it immediately.

Section 11

International Data Transfers

Our servers are located in the United States. By using the Services, you consent to the transfer and storage of your information in that country, which may have different privacy regulations than your country of residence.

In cases where your country's legislation requires additional safeguards for international data transfers (such as Colombia, Panama, or Uruguay), Augmmerce adopts the necessary contractual and technical measures to ensure a level of protection equivalent to that required by such regulations.

Section 12

Changes to This Policy

We may update this Privacy Policy periodically. When we make significant changes, we will notify you by email or through a prominent notice on the platform with at least 15 days' notice.

Your continued use of the Services after changes are posted constitutes your acceptance of the updated Policy.

Section 13

Contact

For questions, requests, or inquiries related to this Privacy Policy:

• Organization: Augmmerce — Bit Bytes Solutions LLC
• Email: [email protected]
• Website: augmmerce.com
• WhatsApp: +54 9 11 7066-5037