AOne1 Privacy Policy

Last Updated: November 27, 2025

Welcome to AOne1. A little bit about us: We're the smart savings platform that connects AI to your inbox — helping you find, remember, and redeem every deal and credit automatically. When you use AOne1 products, you're trusting us to handle your personal data with care. We take that trust seriously. We make money when users purchase our paid products, not by selling or monetizing user content or selling data.

This Privacy Policy describes how AOne1, Inc. ("AOne1", "we," or "us", "Company") and our subsidiaries and affiliated companies collect, use, and disclose information about you, as well as privacy choices available to you. We offer lots of tools to different people and organizations, so we need to explain when this Privacy Policy applies:

We may update this Privacy Policy from time to time by publishing an updated version. If we make material changes, we will provide you additional notice, such as by sending you an email.

Information We Collect

The information we collect depends on how you use our products and how you manage your privacy settings.

We collect information you provide to us. This includes:

We collect some information automatically. We do this when you use our products or browse our websites, for example. This includes:

Information from other sources

We may collect information about users and non-users that's publicly available, and we may license data such as your contact info or information about your company or job function from third parties. This data may be combined with the other information we collect and might include aggregate-level data, such as which IP addresses correspond to zip codes or countries.

Information we infer

Finally, we may infer information about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address, predict that you are interested in certain products we offer based on your usage data and past purchases, and, depending upon your account settings, we may infer what industry you work in based on your use of our products.

How We Use Information We Collect

How we use the information we collect depends upon how you use our products and your privacy settings. We use information to:

When We Disclose Information

We disclose information to the types of recipients and in the scenarios described below.

We may use and disclose data that has been de-identified so that it can no longer reasonably be used to identify you. We commit to maintaining and using such information in de-identified form and not to attempt to re-identify the information, except for the purpose of determining whether our de-identification processes satisfy applicable legal requirements.

Security and Retention

We design our products with security in mind, and we use a combination of safeguards and processes designed to secure data, including encryption, secure network configuration, and other measures, including encryption, network segregation, and access minimization.

We retain personal data for as long as necessary to provide our products to you, to complete the transactions you have requested, to comply with our legal obligations, to resolve disputes, and for other legitimate business purposes. We retain the data we collect for different periods of time depending on what it is, how it's used, and how you configure your settings.

For example, where we process information for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in the future.

Your Rights and Choices

We offer you controls to manage your information and communications preferences with us.

Google User Data

When you connect your Google account to our services, we access, use, store, and handle your Google user data as follows:

How We Access Google User Data

We request read-only access to your Gmail account to identify promotional emails, discount codes, and savings opportunities. We do not request permission to send, delete, or modify your emails.

How We Use Google User Data

We use the data accessed from your Gmail account solely to:

We do not use your email data or any user content to train AI models or machine learning systems.

How We Store Google User Data

We store your email data securely using industry-standard encryption and security measures. Your data is stored on secure servers with access restricted to authorized personnel and systems only.

How We Share Google User Data

We do not share your Google user data externally with third parties for their marketing or advertising purposes. We do not sell your email data. Your email content remains private and is processed only to provide our services to you.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Transfers

We may transfer and process your data outside of the country where you live. Countries' data protection laws vary, with some providing more protection than others. Regardless of where your information is processed, we apply the protections described in this policy and we comply with certain legal frameworks relating to the transfer of data, including ensuring that relevant safeguards are in place for the transfer of data where required by law.

Additional US State Law Information

Some US states have enacted privacy laws that grant their residents certain rights and require specific disclosures ("State Privacy Laws"). If you reside in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, or another state governed by a State Privacy Law, then this section applies to you. This section also serves as our California notice at collection.

Additional Disclosures

Above, we explain how we collect, use, and disclose information about you, as well as our targeted advertising practices. As required by certain State Privacy Laws, we use the tables below to explain this same information.

Use, Disclosure, and Retention of Personal Information for Business Purposes

Category of Personal Information

Account information (which includes identifiers, such as your email address and account ID)

Communications with us and feedback (which includes survey responses and interactions with our customer support or sales teams)

Technical information and usage data (which includes internet or other electronic network activity information, such as your activity on our websites and apps and device and browser information, and identifiers, such as your IP address)

Cookie information (which includes identifiers, such as Cookie IDs)

Professional information

Inferences (which includes predictions, such as your approximate location based on your IP address)

User content

Uses of Personal Information

Provide and tailor our products to you; Improve our products and build new ones; Secure our products and troubleshoot problems; Communicate with you and provide customer service; Market our products to you (excluding user content); and Handle compliance issues and protect against harm.

Category of Recipients

The AOne1 family of companies; Trusted service providers; Government, legal, and similar authorities; Recipients in connection with a merger, acquisition, or similar transaction; and Others with your consent or at your direction.

When we process information that is considered "sensitive" under State Privacy Laws (such as when such information is included in your user content), we use such data only for the legally permitted purposes described above, in the same way we process user content generally. We similarly limit how we process account log-in information and contents of communications not sent to us, which may be considered "sensitive" under certain State Privacy Laws. We do not use or disclose such information for the purpose of inferring characteristics about you.

Above, we describe that we collect personal information from various sources, including directly from you, automatically when you access or use our products, and from other sources, as well as the purposes and time periods for which we retain personal information.

Sales, Sharing, and Targeted Advertising

To promote our products on third-party websites and services, we disclose the following categories of personal information to the following categories of recipients. These disclosures may be considered "sales", "sharing", or use of personal information for "targeted advertising" under State Privacy Laws.

Category of Personal Information Disclosed

Identifiers (such as cookie IDs, IP addresses, or unique IDs generated from your email address or phone number)

Internet or other electronic network activity information (such as links you click or pages you visit on a AOne1 marketing website)

Commercial information (such as product purchase information)

Inferences (such as predictions about your interest in certain products we offer based on your usage data)

Category of Third-Party Recipient

Advertising networks; Social networks

We do not engage in sales, sharing, or targeted advertising using personal information about anyone we know to be under the age of 18.

Your Rights under State Privacy Laws

Opt-Out Rights

You may opt out of activities that we engage in that may constitute "targeted advertising", "sharing", or "sales" of personal information under the State Privacy Laws. To do so email us at [email protected].

Access, Correction, and Deletion

You have the right to (1) request to know more about and access your personal information, including in a portable format, (2) request deletion of your personal information, and (3) request correction of inaccurate personal information. We may ask for additional information from you to verify that you are authorized to make a data rights request. Please email us at [email protected].

Nondiscrimination

You have the right not to be discriminated against for exercising any of your privacy rights.

Appeals

If we deny your request, you may appeal our decision by submitting a support ticket. If you have concerns about the result of an appeal, you may contact the attorney general in the state where you reside.

Authorized Agents

If you are an authorized agent seeking to make a request to opt out of sales, sharing, or targeted advertising on behalf of a consumer, please email us at [email protected].

If you reside in California, you may also designate an authorized agent to submit an access, deletion, or correction request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may contact the consumer who is the subject of the request to verify their own identity or confirm that the authorized agent has permission to submit the request. If you are an authorized agent seeking to make an access, correction, or deletion request on behalf of a California consumer, you can email us at [email protected].

Minors

In general, our Services are not directed to users below the age of 18 years, or equivalent minimum age in the relevant jurisdiction. If you are younger than 18, you cannot register with and use our Services.

Social Networking / 3rd Party Platform Connections

If you create the account using one of the available social networking or third-party platform connection options (a "social sign-in" like Google, Facebook, or Yahoo), we will collect your associated email address and related profile information from the social sign-in provider.

You can sign in to our Services using third-party social sign-ins (e.g., Google, Facebook, and Yahoo). These social sign-in providers will share certain Personal Data with us as described in their sign-in notices or in their privacy policies, which might include information such as your name, profile picture, age range, gender, and other public information. We encourage you to review prior to signing in through the applicable service.

Language

This Privacy Statement is written in the English language. If any translated versions of this Privacy Statement conflict with the English language version, the English language version of this Privacy Statement shall control.

Automated Decision Making

Automated decisions are defined as decisions about individuals that are based solely on the automated processing of Personal Data and that produce legal effects that significantly affect the individuals involved ("Automated Decision Making"). We only performs Automated Decision Making based on the necessity for the performance of or entering into a contract, your explicit consent or if a law specially allows the processing for Automated Decision Making. The following elements contribute to our Automated Decision Making: (i) categories of data used in the profiling or decision-making process, (ii) why these categories are considered relevant, (iii) how any profile used in the automated decision-making process is built, including any statistics used in the analysis, (iv) why this profile is relevant to the automated decision-making process, (v) how it is used for a decision concerning the data subject, and (vi) fact that automated processing is in place and that he/ she can obtain human intervention if not satisfied with the outcome.