Template pending owner and legal review. Last updated 27 October 2026.
Privacy policy
ASOMaster is built to keep your work on your own computer. This policy explains the little personal data we do process, why, and what you can ask us to do with it.
Who we are
The controller is Cressu OÜ, registry code 17463862, VAT EE103006011, Uus-Sadama tn 21-207, 10120 Tallinn, Estonia. Contact: asomaster@cressu.com.
The desktop app
Your projects, keywords, rank history, listing drafts and settings are stored in a database on your computer. We have no copy and no account system.
- Store and ads credentials (App Store Connect, Google Play Console, Apple Ads, Google Ads) are kept in your operating system's keychain and sent only to Apple or Google.
- Rank checks are searches of the public App Store and Google Play, made from your computer.
- AI features send the text a task needs (for example your listing and keywords) to the AI provider you chose (Anthropic, OpenAI, an OpenCode provider, or a local Ollama model). That provider processes it under its own terms; with a local model nothing leaves your computer.
Licensing and updates
To activate and keep your license valid, the app talks to our license server. We process:
- your purchase email and license (the key is stored hashed for lookup and encrypted so we can re-send it);
- for each activated computer: a random device identifier and public key created by the app, the computer's name, platform and app version, and when it was activated and last seen;
- activation and renewal events with a hashed IP address and network information, used for rate limiting and to detect a key being shared;
- update checks, which include your app version and platform.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in preventing license abuse (Art. 6(1)(f)).
Payments
Payments are handled by Stripe. Stripe collects your card or payment details, billing address and, if you enter one, your VAT ID; we receive the email, country, subscription status and invoices, never full card numbers. If you accepted analytics cookies, the buy link carries your analytics visitor and session identifiers so we can tell which page led to a purchase; they are stored with the Stripe checkout. Legal basis: contract and legal obligations for tax records (Art. 6(1)(b) and (c)).
Emails and feedback
- License emails (your key, re-sends) are sent through Resend.
- Rank alert emails are sent only if you turn them on in the app, to the address you give.
- Feedback you send from the app includes your message and, if you add them, your email and a screenshot, plus a hashed IP address for rate limiting.
This website
asomaster.app is a static site served by Cloudflare. Cloudflare processes your IP address and request details to deliver the site and protect it from abuse. Without your consent the site sets no cookies and loads no analytics.
The license page forms send your email or license key to our license server (asomaster-api.cressu.com) only when you submit them.
Cookies and local storage
We ask before setting any analytics cookie. Change your choice at any time with (also in the footer).
| Name | Type | Purpose | When |
|---|---|---|---|
ml_vid | First-party cookie (Minilytics) | Visitor identifier: counts returning visitors and attributes a purchase to the page that led to it. | Only after you accept analytics |
ml_sid | First-party cookie (Minilytics) | Session identifier: groups the pages of one visit and attributes a purchase to it. | Only after you accept analytics |
asomaster-consent | Local storage | Remembers whether you accepted or rejected analytics. | When you choose |
asomaster-theme | Local storage | Remembers light or dark mode if you switch it. | When you switch |
The analytics script is served from analytics.3dxenon.com and is operated for us as a processor. Legal basis for analytics: your consent (Art. 6(1)(a) GDPR and the ePrivacy rules); withdrawing it stops analytics from then on. Local storage entries hold only your choices and never leave your browser.
Service providers
| Provider | What for |
|---|---|
| Cloudflare, Inc. | Website hosting, license server, database and file storage |
| Stripe Payments Europe Ltd. | Payments, subscriptions, invoices, tax |
| Resend | Sending license and alert emails |
| Purelymail | Our support inbox |
| Minilytics (analytics.3dxenon.com) | Website analytics, only with your consent |
Some providers process data outside the EU/EEA; where they do, transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.
How long we keep data
- License, device and subscription records: while your license exists, then as long as tax and accounting law requires (in Estonia, generally 7 years for accounting records).
- Activation logs and rate-limit records: kept only as long as needed for security, then deleted.
- Feedback: until the issue is resolved, then deleted or anonymised.
- Analytics: as configured in the analytics service, and never longer than needed.
Your rights
You can ask for access to, correction or deletion of your personal data, restrict or object to processing, and ask for a copy in a portable format. Where we rely on consent you can withdraw it at any time. Write to asomaster@cressu.com; we answer within one month. You may also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or your local authority.
We may update this policy. Material changes are announced on this page with a new date.