Legal

Privacy Policy

Last updated: 11 September 2026

This is how Faster Forward Inc (British Columbia, Canada — “we”, “us”) handles personal data, both on this website and through the AB Split Test plugin. It’s written to be read. Questions go to [email protected].

The short version

• Your visitors’ data never comes to us. Heatmaps, session recordings and test results stay in your WordPress database. We don’t have a copy and can’t see them.
• On this site we collect what you give us — an email address to download or buy, billing details to charge you — plus the usual analytics and, yes, an advertising pixel. Details below, including how to block it.
• The plugin talks to our servers for a few specific things: checking your licence, delivering updates, running CROassist, and a light automatic scan you can turn off. We list every one.
• We don’t sell personal data. We share it only with the services we need to run the business, and we name them.
• You can ask us what we hold about you, have it corrected or deleted, or take it with you. One email.

1. Who this covers

• Visitors and customers of absplittest.com — people who browse, download the free plugin, buy a licence, or contact support.
• People who use the plugin on their own WordPress sites — your licence and the plugin’s connections to our servers.
• Visitors to sites that run the plugin. Here we are not the data controller. The site owner is. The plugin stores what it collects on their server, and nothing about those visitors is sent to us. If you have a question about a site that uses AB Split Test, ask the owner of that site.

2. What we collect on absplittest.com

Things you give us

• Downloading the free plugin: your email address.
• Buying a licence: your email, the name on your card, and your billing country, region and postal code (we need those to work out tax). Payment itself is handled by Stripe or PayPal; we never see or store your full card number.
• Support: whatever you put in a ticket or an email, and the address you sent it from.
• Surveys and feedback: answers to the occasional “how did you hear about us” or “why did you cancel” question. All optional.

Things collected automatically

• Server logs: IP address, browser type, pages requested — the standard record every web server keeps, used for security and to keep the site up.
• Analytics: Google Analytics, and a self-hosted analytics tool that stores its data in our own database rather than a third party’s.
• Advertising: the Meta (Facebook) Pixel, and a matching server-side connection to Meta, so we can measure whether our ads work and show ads to people who’ve visited. See section 6 for how to opt out.
• Forms: Google reCAPTCHA on forms, to keep bots out. Google sets a cookie for this.
• Chat: a Tawk.to chat widget. If you open it, what you type goes to Tawk.to so we can reply; it also sets a cookie to remember the conversation.

3. What the plugin sends to us

AB Split Test is self-hosted. These are the only things it sends to our servers, and what we keep from each:

• Licence activation and update checks — your site’s URL, your licence key, and the plugin and WordPress versions. We keep the URL and the date against your licence so we can tell which sites it’s active on.
• The heartbeat — a periodic check-in that confirms the licence is active. On paid plans it also runs a small automatic CROassist scan of a few of your pages so the dashboard has fresh suggestions. We keep a log of when it ran and whether it succeeded, and the suggestions it produced so we don’t repeat them. You can turn the scan off in the plugin’s settings.
• CROassist requests — when you ask it to analyse a page, rewrite copy, or generate tests, the content you point it at is sent to our servers and on to a third-party AI model to do the work (section 5). We keep a count of the credits you’ve used. We do not store the content of your requests or the model’s replies.
• Screenshots — to look at a page visually, we render it through a third-party screenshot service. Renders are used for the analysis and not kept beyond a short cache.
• The Cloudflare edge worker — if you enable edge testing, the plugin deploys a worker into your Cloudflare account. Your test configuration lives in your account’s storage. Nothing about your visitors passes through us.

What the plugin never sends: your visitors’ heatmaps, recordings, clicks, form entries, or test results. Those stay on your server.

4. Why we use it, and on what basis

• To deliver what you bought — process your order, issue and check your licence, ship updates, run CROassist, answer support. Basis: performing our contract with you.
• To run and protect the site — logs, security, keeping bots out, understanding which pages people use. Basis: our legitimate interest in running a working, secure business.
• To tell you about the product — onboarding emails after a download or purchase, and product news (section 7). Basis: our legitimate interest in talking to our customers, and your consent where the law requires it. You can stop it any time.
• To advertise — measuring and retargeting through Meta. Basis: consent where the law requires it; otherwise legitimate interest. Opt-out in section 6.
• Because the law says so — keeping invoices for tax, responding to lawful requests. Basis: legal obligation.

5. Who we share it with

We don’t sell personal data, and we don’t hand it to third parties for their own marketing. We do use other companies to run parts of the business, and they see what they need to do their job:

• Stripe and PayPal — payments.
• Mailgun — sends our email, both receipts and newsletters.
• Google — Analytics, and reCAPTCHA on forms.
• Meta — ad measurement and retargeting (section 6).
• Tawk.to — the chat widget, if you use it.
• Cloudflare — sits in front of this site as a CDN and firewall, so requests to us pass through it.
• Vultr — hosts our servers, in the United States.
• AI model providers — CROassist requests are routed to third-party models. We use them under API terms that don’t allow your content to be used for training, and we turn on zero-data-retention wherever the provider offers it. Which model we use changes as results improve, so we don’t name one here.
• Screenshot services — render pages for CROassist to look at.

We’ll also disclose data if the law genuinely requires it, and we’d tell you unless we’re legally prevented from doing so.

6. Cookies, analytics and advertising — and how to say no

This site sets cookies for things that need them: keeping you logged in, remembering your cart, reCAPTCHA, and the chat widget. It also runs Google Analytics and the Meta Pixel, which set their own cookies and can follow you across sites.

If you’d rather not be tracked:

• Any content blocker or the “block third-party cookies” setting in your browser stops both Google Analytics and the Pixel.
• Google’s own Analytics opt-out covers Analytics everywhere.
• Meta’s ad preferences let you turn off ads based on activity on other sites.

The plugin itself, on your site, sets no advertising cookies and includes a consent mode that respects your visitors’ cookie choices.

7. Email from us

When you download the free plugin or buy a licence, we’ll email you: a receipt or download link, a short onboarding sequence to help you get a first test running, and occasional product news after that. Every marketing email has an unsubscribe link, and unsubscribing takes effect immediately. We’ll still send the emails you can’t opt out of — receipts, renewal notices, and anything about your account or a change to these policies.

8. Where your data lives

We’re a Canadian company, and our servers are in the United States. Some of the services in section 5 are also in the US. That means your data crosses borders; where the law requires it, we rely on the providers’ standard contractual protections for the transfer. Your visitors’ data isn’t affected by any of this — it never leaves your server.

9. How long we keep it

• Orders and invoices: 7 years, because tax law requires it.
• Your account and licence: while the licence is active, and 2 years after it lapses, so you can come back and renew.
• Support tickets: 3 years.
• CROassist usage: credit counts for the life of the licence. Request content: not stored.
• Heartbeat and activation logs: 12 months.
• Marketing email: until you unsubscribe or ask us to delete you.
• Server logs: a few weeks, on a rolling basis.

10. Your rights

Wherever you are, you can ask us to tell you what we hold about you, correct it, delete it, give you a copy, or stop using it for marketing. Email [email protected]; we’ll reply within 30 days and usually much faster. We’ll need to confirm it’s you, which normally means replying from the address on the account.

If you’re in Canada, the EU, the UK or somewhere else with a privacy law, you also have the right to complain to your privacy regulator — in Canada that’s the Office of the Privacy Commissioner. We’d rather you told us first, so we can fix it.

Deleting your account deletes your licence too, so we’ll confirm that with you before we do it.

11. Security

Everything between you and this site travels over TLS. Card numbers go straight to Stripe or PayPal and never touch our servers. Access to customer data inside the business is limited to the people who need it for support and billing. No system is perfect; if we ever have a breach that affects you, we’ll tell you.

12. Children

AB Split Test is a business tool for people 18 and over. We don’t knowingly collect data from anyone younger; if you think we have, tell us and we’ll delete it.

13. Changes to this policy

The date at the top tells you when this last changed. Small clarifications just get published. If we change something that materially affects how we use your data, we’ll email customers before it takes effect.

14. Contact

Faster Forward Inc, British Columbia, Canada.
[email protected]