Privacy Policy
AsymiLink Meta LLLP is committed to protecting your privacy and handling your data with transparency, security, and respect. This policy explains what we collect, why, and your rights.
Overview
This Privacy Policy describes how AsymiLink Meta LLLP ("AsymiLink Meta", "we", "us", or "our") collects, uses, stores, and protects information obtained from visitors to our website at asymilinkmeta.com and any related services or applications (collectively, the "Services").
By using our Services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree, please discontinue use of the Services.
Jurisdictions covered by this policy:
- • European Union & United Kingdom (GDPR / UK GDPR)
- • United States — California (CCPA / CPRA)
- • Australia (Privacy Act 1988, Australian Privacy Principles)
Data Controller
For the purposes of applicable data protection laws, the data controller is:
AsymiLink Meta LLLP
501 East Las Olas Boulevard
Fort Lauderdale, FL 33301
United States
Primary Headquarters
AsymiLink Meta
15/17 Millennium Court
Helensvale QLD 4212
Australia
Development Office
Contact us at: Sales@asymilinkmeta.com
What We Collect
Information you provide directly
- Contact form submissions: Name, email address, company name, phone number, and any message content you submit through our contact or lead forms.
- Chat conversations: Messages exchanged with our AI chat assistant or voice agent. They are stored so the assistant can follow the conversation and so we can answer anything it couldn't (see AI chat assistant below).
- Business case / playbook inputs: Company size, industry, operational data you enter into our AI-powered business case or playbook generation tools.
- Resource downloads: Email address and company details provided when requesting gated content such as whitepapers or playbooks.
Information collected automatically
- Referral and UTM data: How you arrived at our website — including the referring website, search engine, AI assistant (e.g., ChatGPT, Perplexity), and any UTM campaign parameters in the URL.
- Industry personalization: Your probable industry vertical, inferred from URL parameters or referrer signals, used to display relevant content.
- Session data: A session token to maintain continuity of your chat session. This is strictly necessary for the chat feature to function.
- Technical data: IP address, browser type and device type, handled by our hosting infrastructure to deliver the site and protect it from abuse. Our edge reads your country from the IP address to choose the consent behaviour below; only the two-letter country code is passed to the page, and the IP is not stored with it.
First-party analytics
When you accept analytics, we record cookieless page views and product-funnel events on our own servers (Supabase). A daily visitor key is an HMAC of IP address + user-agent + UTC day — the raw IP is never stored with the event. We classify known AI and search crawlers so human traffic stays separate. Aggregates may be sent to AsymiLink Studio (our CRM) over a signed server-to-server channel. We do not use Google Analytics, Meta Pixel, or other advertising trackers, and we do not sell personal information.
Before you have made a choice in the cookie bar, we only count the visit: the page path, and on the first page of your visit the website you came from (the domain only, such as google.com), add one to a daily total for that page. Nothing is stored on your device for this, and no visitor key, IP address or browser details are kept with the count, so it cannot be linked to you or to your other page views. If you click Reject, nothing is sent at all, not even this count.
How we ask for consent, by region
- Accept turns on Essential and Analytics. Preferences stays off unless you switch it on under "See more". Reject keeps Essential only.
- EU/EEA (the 27 EU countries plus Iceland, Liechtenstein and Norway), the United Kingdom and Switzerland: nothing optional starts until you click Accept or save your choices. The same applies when we cannot tell which country you are in.
- Everywhere else: analytics switches on when you scroll past the top of the page or after the cookie bar has been on screen for 10 seconds without a choice, whichever comes first. The bar then says analytics is on, and you can turn it off there or at any time through "Cookie settings" in the footer.
- Global Privacy Control or Do Not Track: if your browser sends either signal, analytics is never switched on automatically, wherever you are.
- Consent record: we keep a record of each choice (accepted or declined, which categories, whether it was a click, a scroll or the 10-second timeout, your country code, the policy version and the time) so we can show what you agreed to. It is tied to a random identifier stored in your browser, not to your IP address, name or email.
How We Use Your Data
- To respond to inquiries: Contact form and chat submissions are recorded in AsymiLink Studio (our CRM) and used to follow up and provide the services you requested.
- AI chat assistant: The chat assistant on this website is AsymiLink AI. When you first open the chat, it keeps a random session identifier on your device (
alm_chat_session, removed after 12 months without use); nothing is stored before you open it. we store only a scrambled (hashed) version of it with your messages. Conversations are stored for up to 12 months and a copy of each conversation, with a short summary and any questions the assistant couldn't answer, is recorded in AsymiLink Studio so we can improve our answers. Messages are processed by our language model provider (see Third parties) to write replies. The assistant never asks for your contact details in the conversation: if you choose to send them through the short form in the chat (to have us follow up, request a meeting time or talk to a person), we record your details, your request and the conversation in AsymiLink Studio, our sales team receives a copy, and we may contact you about your enquiry. To help our team prioritise, we give these enquiries a lead score based on what you told us (for example the kind of project, timeline and whether you asked for a meeting); it is used only internally and never to make decisions with legal or similarly significant effects. If you tick "Remember me", we also keep your name and a short summary so the assistant can pick up where you left off on your next visit from this browser. Choose Forget me in the chat menu at any time to delete the stored conversations from this browser and anything remembered about you; to remove details already sent to our team, email us (see Contact). Please don't share sensitive personal data in the chat. - To personalize your experience: Industry detection enables us to surface the most relevant case studies, solutions, and content for your sector.
- To understand traffic sources: Referral and UTM tracking helps us understand which channels drive visitors, allowing us to allocate marketing resources effectively.
- To improve our services: Aggregated and anonymized usage data informs product decisions and content strategy.
- To follow up on playbooks and business cases: When you generate an industry AI playbook or a business case, we record your contact details, your answers (for a business case, including any figures you carried over from the ROI calculator) and the generated document in AsymiLink Studio (our CRM), and our sales team receives a copy so we can contact you about it. Generating a playbook or business case means you agree to that follow-up. For playbooks only, if you allowed analytics cookies, we also link the pages you viewed on this site in the previous seven days to the playbook. Ask us at any time to stop contacting you or to delete these records.
- To send you insights you asked for: We add you to our insights mailing list only if you tick the optional "Send me AsymiLink Meta insights" box (or otherwise sign up). You can unsubscribe at any time.
- To send you requested resources: If you request a whitepaper or other resource, we record the request in AsymiLink Studio, our sales team receives a copy, and we may contact you about it. Ask us at any time to stop.
- To comply with legal obligations: We retain certain records as required by applicable law.
We do not sell your personal data. We do not use your data for automated decision-making or profiling with legal or similarly significant effects.
Legal Basis for Processing (GDPR)
For users in the EU and UK, we rely on the following lawful bases under Article 6 GDPR:
| Processing activity | Legal basis |
|---|---|
| Contact form submissions | Legitimate interest (responding to enquiries) / Contract performance |
| Chat session token | Legitimate interest (strictly necessary for service functionality) |
| Chat conversations and transcripts | Legitimate interest (answering your questions and improving our answers) |
| Details sent from the chat form, and lead scoring | Legitimate interest (responding to your enquiry) |
| Chat memory across visits ("Remember me") | Consent (withdraw any time with Forget me) |
| Referral & UTM tracking | Consent |
| Industry personalization (localStorage) | Consent |
| First-party analytics (page views, funnels) | Consent |
| Anonymous daily page counts (before a cookie choice) | Legitimate interest (knowing which pages are read; no identifiers kept) |
| Legal compliance records | Legal obligation |
Cookies & Local Storage
Our website does not set traditional HTTP cookies. Instead, we use browser localStorage and sessionStorage APIs, which are functionally equivalent to cookies for regulatory purposes.
| Key | Storage | Purpose | Category | Duration |
|---|---|---|---|---|
| alm_cookie_consent | localStorage | Stores your consent decision (accepted / declined) | Essential | 12 months, then we ask again |
| alm_cookie_categories | localStorage | Stores analytics and preferences toggles | Essential | 12 months, then we ask again |
| alm_cookie_consent_record | localStorage | Your last consent choice: categories, method (click, scroll or timeout), country code, policy version and time | Essential | 12 months, then we ask again |
| alm_cookie_consent_id | localStorage | Random identifier linking your consent records (no personal data) | Essential | 12 months, then we ask again |
| alm_cookie_banner_shown | sessionStorage | Remembers that the consent banner has been shown during this visit, so it stays on screen until you make a choice | Essential | Session (cleared when you close the tab) |
| asymilink.businessCase.active | localStorage | Resumable business-case id and access token for this browser | Essential | 30 days, or sooner when the case is finished or cleared |
| asymilink.playbook.<industry>.active | localStorage | Resumable industry playbook request id and access token for this browser | Essential | 90 days, or sooner when cleared |
| asymilink:bc-inputs | sessionStorage | Figures you choose to carry from the ROI calculator or chat into the business case form (read once, never put in the URL) | Essential | Session (cleared when you close the tab) |
| alm_chat_prefill | sessionStorage | Details you ask the chat assistant to carry into a form on this site (read once, then removed) | Essential | Session (cleared when you close the tab) |
| alm_chat_session | localStorage | Chat session identifier, created only when you first open the chat | Essential | 12 months after you last use the chat, or until you choose Forget me |
| alm_referral_data | sessionStorage | Referral source, UTM params, landing page | Analytics (opt-in) | Session (cleared when you close the tab) |
| alm_landing_page | sessionStorage | First page visited | Analytics (opt-in) | Session (cleared when you close the tab) |
| detectedIndustry | localStorage | Inferred industry vertical for personalization, kept only if you accept analytics | Analytics (opt-in) | 30 days |
Every localStorage entry above is removed automatically once it is older than the duration shown: the site checks the dates each time a page loads. sessionStorage entries are cleared by your browser when you close the tab. You can manage your consent preferences at any time using the panel in the sidebar of this page, or by clearing your browser's local storage.
Third-Party Services
We use the following third-party services that may process your data:
Supabase
Database and backend infrastructure. Contact form submissions, chat messages, and business case data are stored in Supabase-hosted PostgreSQL databases.
Data region: USA
OpenAI / Anthropic / Google / xAI (Grok) (AI APIs)
Our AI chat, voice agent, and content generation features route queries through large language model APIs. Conversation data may be processed by these providers subject to their terms.
Data region: USA
Netlify / Cloudflare
Website hosting and CDN. Standard server logs including IP addresses and request metadata are retained per their data retention policies.
Data region: USA
Google Analytics (not used)
We do not use Google Analytics. First-party analytics (above) is processed on our Supabase project and may be rolled up to AsymiLink Studio under a separate processing agreement.
Data region: USA
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Data Retention
| Data type | Retention period | Rationale |
|---|---|---|
| Contact form submissions | 3 years | Business relationship and legal compliance |
| Chat session transcripts | 1 year | Service improvement and dispute resolution |
| Chat memory ("Remember me") | 1 year from your last chat, or until you choose Forget me | Continuity across visits (with consent) |
| Business case / playbook data | 2 years | Service delivery and follow-up |
| Resource download leads | 3 years | Marketing communications (with consent) |
| Server logs (IP, requests) | 90 days | Security and abuse prevention |
| First-party analytics events | 26 months | Traffic and product measurement; deleted automatically |
| Anonymous daily page counts | 26 months | Totals per page and day only; no personal data |
| Consent records | 3 years | Proof of the consent choice; deleted automatically |
| Session storage (browser) | Browser session | Automatically cleared on tab close |
| Local storage (browser) | Until cleared | User-controlled; can be cleared at any time |
Your Rights
Depending on your jurisdiction, you have the right to:
Access
Request a copy of the personal data we hold about you.
Rectification
Request correction of inaccurate or incomplete data.
Erasure
Request deletion of your personal data ("right to be forgotten").
Restriction
Request that we restrict processing of your data.
Portability
Receive your data in a structured, machine-readable format.
Object
Object to processing based on legitimate interest.
Withdraw consent
Withdraw consent at any time without affecting prior lawful processing.
Non-discrimination
Not be discriminated against for exercising your privacy rights (CCPA).
To exercise any of these rights, contact us at Sales@asymilinkmeta.com. We will respond within 30 days (or as required by applicable law). We may ask you to verify your identity before fulfilling the request.
GDPR (EU & UK)
If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR apply to our processing of your personal data. In addition to the rights listed above, you have the right to lodge a complaint with your local supervisory authority:
Where we transfer personal data outside the EU/EEA (e.g., to our US-based service providers), we rely on standard contractual clauses or the adequacy decisions of the European Commission to ensure an equivalent level of protection.
CCPA / CPRA (California)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
- Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm.
- Right to Limit Use of Sensitive Information: We do not collect sensitive personal information as defined by the CPRA.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To submit a verifiable consumer request, email Sales@asymilinkmeta.com with the subject line "CCPA Request". We will verify your identity and respond within 45 days.
Australian Privacy Act
Our Australian development office operates in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Key commitments include:
- APP 1 — Open & transparent management: This policy constitutes our APP Privacy Policy.
- APP 3 — Collection of solicited personal information: We collect only the personal information reasonably necessary for our functions.
- APP 5 — Notification of collection: We notify you of data collection at the point of collection.
- APP 6 — Use or disclosure: We use your information only for the primary purpose of collection unless you consent otherwise.
- APP 11 — Security: We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access.
- APP 12 — Access and correction: You may request access to, or correction of, your personal information by contacting us.
Complaints regarding our handling of personal information may be directed to the Office of the Australian Information Commissioner (OAIC).
Security
We implement industry-standard technical and organizational measures to protect your personal data, including:
- TLS/SSL encryption for all data in transit
- Encryption at rest for database storage (Supabase)
- Row Level Security (RLS) policies restricting database access
- Regular security audits and vulnerability assessments
- Access controls limiting data access to authorized personnel only
Despite these measures, no internet transmission is 100% secure. In the event of a data breach affecting your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.
Children's Privacy
Our Services are intended for business professionals and are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately at Sales@asymilinkmeta.com and we will delete it promptly.
Policy Changes
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we may provide additional notice (such as a banner on our website or an email to registered contacts).
We encourage you to review this policy periodically. Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.
Contact Us
For privacy-related inquiries, to exercise your rights, or to submit a complaint, please contact our Privacy Team:
AsymiLink Meta LLLP — Privacy Team
501 East Las Olas Boulevard, Fort Lauderdale, FL 33301, USA
Sales@asymilinkmeta.comWe aim to respond to all privacy requests within 30 days. For CCPA requests we will respond within 45 days.