Privacy Policy
Last updated October 2026
This is a starting template for Echo deployments. Have it reviewed by counsel and adapt it to your entity before relying on it.
What we collect from customers
Account details you give us (name, email, password hash), the sites you connect, and settings you configure. Payment details are handled by our payment processor and never stored by Echo.
What the Echo script collects from store visitors
Anonymous, randomly generated visitor and session identifiers, pages viewed, experiment assignments, add-to-cart and purchase events with order value, coarse device type, traffic channel and country. We do not collect names, emails, IP addresses or cross-site identifiers.
Storage on visitors' devices
The script uses first-party localStorage and sessionStorage to keep visitors in the same variant and avoid flicker. It sets no cookies. Event sending can be held until analytics consent is granted.
How we use data
To run experiments, compute results, power analytics and generate optimization suggestions for the site owner. We don't sell data or use it for advertising.
Sub-processors
Hosting and database providers, an email provider for transactional mail, and, only if the site owner enables it, an AI provider to generate copy. Scanning uses public page content.
Retention and deletion
Event data is kept while your account is active. Deleting a site deletes its experiments, events and learnings. Contact us to delete your account.
Contact
Questions about privacy? Email privacy@your-domain.example.