Privacy Policy
AI Boost for Joomla
This Privacy Policy explains what personal data we collect, why, and what rights you have. It covers the AI Boost brand, the AI Boost for Joomla product, and our website and services at aiboostnow.com, api.aiboostnow.com and updates.aiboostnow.com.
1. Who is responsible for your data
The data controller is:
EMARKET1NG.NET DOO Beograd
Tuzlanska 18, 11090 Belgrade, Republic of Serbia
| Company registration number | 17409867 |
|---|---|
| Tax number | 100169279 |
| Privacy contact | support@aiboostnow.com |
We process personal data in line with the Serbian Law on Personal Data Protection and, where it applies to customers and visitors in the European Union / European Economic Area, the EU General Data Protection Regulation (GDPR).
2. When this Policy applies
This Policy applies when you visit our website, create and use a customer account, buy or renew a licence, install and run AI Boost for Joomla on your own website(s), which communicates with our licensing and update services, or contact us for support.
3. What data we collect
We collect only what we need to sell, license, update and support the product. Most of it comes directly from you; the activation and status data in (c) and (f) is sent automatically by the AI Boost software running on your own website(s). Order and subscription data is provided to us by Lemon Squeezy after your purchase.
(a) Account data is your email address and your password. We do not store your password in plain text. Passwords are stored using a one-way password hash.
(b) Licence data is the licence key(s) linked to your account. Licence keys are stored encrypted at rest.
(c) Per-site activation data is, for each website where you activate the product, the site’s domain, a generated installation identifier (an install_id UUID), and the site’s URL.
(d) Order records are a record of your purchases and renewals, namely the plan you bought, the amount and currency, the dates, the order and subscription references, and the country you give at checkout, if you give one. We also receive the order messages Lemon Squeezy sends us, which carry your name, your email address, and your card’s brand and last four digits. Your payment is taken and your invoice is issued by Lemon Squeezy (see section 5). We do not collect or store your payment-card number. Your full card number is handled by the payment provider and never reaches our systems.
(e) Support data is the content of your support tickets and related messages, including your email address and anything you choose to include.
(f) Licence status signals are periodic status messages (“heartbeats”) the installed software sends to our licensing service to keep your licence status and update eligibility in sync. Each message contains your licence key, the site’s domain, the install_id, and the installed product version.
(g) Technical data is limited technical information generated when you use our website or when the software contacts our services, such as IP address, timestamps and basic server logs, used to run and secure the service.
(h) Website usage data is, only if you accept cookies, the pages you visit on our website, the buttons you click, your browser and device, and the page you came from, collected through Google Analytics and the Meta Pixel. If you then buy a licence, it also includes the order number.
We do not intentionally collect any special categories of data (such as data about health, beliefs or similar). Please do not include such data in support tickets.
4. Why we use your data, and our legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and manage your account and sign you in | (a) | Performance of a contract |
| Issue, validate, renew and manage your licence(s) | (a), (b) | Performance of a contract |
| Enforce your plan’s site allowance, enable licensed features and deliver licensed updates | (b), (c), (f) | Performance of a contract; and our legitimate interest in preventing licence misuse |
| Process your orders and keep the resulting records | (a), (d) | Performance of a contract |
| Keep order, payout and accounting records required by applicable tax and accounting law | (d) | Compliance with a legal obligation |
| Provide customer support | (a), (e) | Performance of a contract; and our legitimate interest in helping customers |
| Keep licence status in sync and confirm update eligibility | (b), (c), (f) | Performance of a contract; and our legitimate interest in delivering updates only to eligible installations |
| Keep our website and services secure and diagnose problems | (c), (f), (g) | Our legitimate interest in the security of our services |
| Strictly necessary website cookies (for example, keeping you signed in) | (g), cookie data | Our legitimate interest in a working website |
| Count visits to our website, measure our advertising and show our ads to people who visited, with Google and Meta, only if you accept cookies | (h), cookie data | Your consent |
Where we rely on legitimate interests, those interests are enforcing licence terms and activation limits, preventing misuse and fraud, delivering updates correctly, keeping our services secure, and supporting our customers. Where we rely on consent, for analytics and advertising cookies, you can withdraw it at any time with Cookie settings (see section 10); that does not affect processing already carried out.
5. Who we share your data with
We do not sell your personal data. We share it only where necessary, with:
- Payment provider. Your payment is handled by Lemon Squeezy, operated by Sold through Link, LLC f/k/a Lemon Squeezy LLC, which acts as our Merchant of Record. It charges you, handles any tax and issues your invoice. It receives the data needed to take your payment, including your full card number and payment account details, which it handles and we do not. Depending on the data concerned, Lemon Squeezy may act as a processor on our behalf or as an independent controller for its own legal and operational purposes.
- Hosting and infrastructure provider, which hosts our website and our licensing and update services, and relays the emails we send (account, licence and support messages).
- Analytics and advertising provider. If you accept cookies, Google receives data about your visits to our website through Google Analytics and Google Tag Manager, including your IP address, your browser and device, and the pages you visit. Google uses it to count visits, to measure which of our ads lead to visits and purchases, and to show our ads to people who visited. After a purchase, Google also receives the order number, but not the amount, your name or your email address (see section 10).
- Meta. If you accept cookies, Meta Platforms Ireland Limited receives data about your visits to our website through the Meta Pixel, including your IP address, your browser and device, the pages you visit and the buttons you click. Meta uses it to measure which of our ads on Facebook and Instagram lead to visits and purchases, and to show our ads to people who visited. After a purchase, Meta also receives the order number, but not the amount, your name or your email address. We and Meta are jointly responsible for collecting and sending this data; Meta alone decides what it does with it afterwards.
- Accounting and tax advisers, who help us maintain statutory accounting, tax and payout records.
- Public authorities, where we are required to disclose data by law or a lawful request.
Some providers process personal data on our behalf as processors, while others, particularly payment providers and public authorities, may act as independent controllers for their own legal and operational purposes. Their processing is governed by their own privacy notices and applicable agreements.
6. International transfers
Some of the providers we use are located outside Serbia and the EEA, so your personal data may be processed abroad. Where personal data is transferred internationally, we take steps to protect it in line with applicable data-protection law.
7. How long we keep your data
We keep your data for as long as you have an account with us, with the exceptions below. We do not delete it on a timer, because your licence, your activations and your order history are what let us support you and handle renewals later.
- We keep your account data, your support tickets and the order messages Lemon Squeezy sends us until you ask us to delete your account.
- After your account is deleted, we keep your licence, its site activations and their log, no longer linked to you, so that your sites keep working. The log records the IP address each licence check came from.
- We keep order, payout and accounting records for the retention period required by Serbian tax and accounting law. These we cannot delete on request.
You decide when the rest goes. Ask us to delete your account and we carry that out. We do not wait for any period to run.
8. How we protect your data
We use appropriate technical and organisational measures, including storing licence keys encrypted at rest, storing passwords using a one-way hash, not storing payment-card numbers, and restricting access to authorised personnel. No system is ever completely secure, so we cannot guarantee absolute security.
9. Your rights
Subject to the conditions in the law, you have the right to be informed about our processing, to access your data and get a copy, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. We do not make decisions with legal or similarly significant effect about you by automated means alone. Automated licence checks are simply technical enforcement of your licence.
To exercise any right, email support@aiboostnow.com. We may need to verify your identity first, and we will respond without undue delay and within 30 days, subject to any lawful extension (we will tell you if a complex request needs more time).
If you believe we have handled your data unlawfully, you may complain to the Serbian data-protection authority, the Commissioner for Information of Public Importance and Personal Data Protection. If you are in the EU/EEA, you may also complain to the authority in your own country. We would appreciate the chance to resolve your concern first.
Our product and website are for business and professional use, are not directed at children, and we do not knowingly collect personal data from children.
10. Cookies
Our website uses strictly necessary cookies and stored values to work properly and to keep you signed in to your account; these are used on the basis of our legitimate interest in providing a functioning site.
With your consent, we also use Google Analytics to count visits and see which pages are read, Google Tag Manager to load that measurement, and Google’s advertising features to measure our ads and show them to people who visited, and the Meta Pixel to measure our ads on Facebook and Instagram and show them to people who visited. Their code is part of every page, so your browser downloads it from Google and Meta when a page opens, and that shows them your IP address. It counts nothing and sets no cookie until you choose Accept in the cookie banner. Without JavaScript the cookie banner cannot appear, and Google Tag Manager’s no-JavaScript version loads instead. Your account pages are never measured. After a purchase, the payment confirmation page sends Google and Meta the order number, once per order.
You can change your choice at any time with Cookie settings at the bottom of every page. If you withdraw your consent, we stop measuring and delete the Google and Meta cookies.
| Cookie | Purpose | Duration |
|---|---|---|
ab_portal | Strictly necessary, to maintain your session and keep you signed in to your account | Up to 14 days |
aib_consent | Strictly necessary, stored in your browser, to remember whether you accepted or rejected analytics and advertising cookies | Until you clear your browser’s data for this site |
_ga | Analytics, only with your consent. Google Analytics uses it to tell visitors apart | Up to 2 years |
_ga_S3GL8BDCW7 | Analytics, only with your consent. Google Analytics uses it to keep the state of your visit | Up to 2 years |
_gcl_au | Advertising, only with your consent. Google uses it to link a purchase to the ad that led to it | Up to 90 days |
_fbp | Advertising, only with your consent. Meta uses it to tell visitors apart and to link a visit or purchase to the ad that led to it | Up to 90 days |
_fbc | Advertising, only with your consent, and only when you arrive from an ad on Facebook or Instagram. Meta uses it to remember that ad click | Up to 90 days |
11. Changes to this Policy
We may update this Policy from time to time. We will post the updated version on aiboostnow.com and, where the law requires, tell you about material changes.
12. Contact
EMARKET1NG.NET DOO Beograd · Tuzlanska 18, 11090 Belgrade, Republic of Serbia · support@aiboostnow.com