Privacy Policy
Last Updated: April 28, 2026
Effective Date: April 28, 2026
1. Introduction
Welcome to FomoBoost ("FomoBoost," "we," "us," or "our"). We operate the website https://fomoboost.com, the FomoBoost software-as-a-service platform, the FomoBoost WordPress plugin, and related applications, APIs, and services (collectively, the "Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard information when you:
- Visit our website;
- Register for an account or subscribe to the Service ("Customers");
- Install or use the FomoBoost WordPress plugin or embed code;
- Interact with notifications, widgets, or campaigns powered by FomoBoost on a Customer’s website ("End Users" or "Visitors").
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
2. Roles and Responsibilities
FomoBoost acts in two distinct roles depending on whose data is being processed:
- Data Controller: With respect to information about our Customers (account holders, billing contacts, website visitors to fomoboost.com), we determine the purposes and means of processing and act as a "Controller" (or equivalent under applicable law).
- Data Processor / Service Provider: With respect to End-User data collected through notifications, widgets, email collectors, review forms, or behavioral triggers deployed by our Customers on their own websites, we act as a "Processor" (or "Service Provider" under the CCPA/CPRA) on behalf of the Customer. The Customer is the Controller of that data and is responsible for establishing a lawful basis for collection, providing notice to End Users, and obtaining required consents.
End Users: If you are an End User and have questions about how a website is using FomoBoost, please contact the operator of that website directly. We act on their instructions.
3. Information We Collect
3.1 Information You Provide as a Customer
When you create an account, subscribe, or contact us, we may collect:
- Account information: Name, email address, password (hashed), company name, job title, country, phone number.
- Billing information: Billing address, tax identifiers, and payment method details. Card data is processed by our payment processors (e.g., Stripe, PayPal) and is not stored on our servers.
- Communications: Messages you send to support, feedback, survey responses, and content you post in our community channels.
- Content you create: Campaign settings, notification text, images, audio/video uploaded to the Service, target URLs, and configuration choices.
3.2 Information We Collect Automatically From Customers
- Log data: IP address, browser type and version, operating system, referring URLs, pages visited within fomoboost.com or the Customer dashboard, timestamps, and crash reports.
- Usage data: Features used, campaigns created, notifications served, click and impression counts, dashboard interactions.
- Cookies and similar technologies: See Section 8 below.
3.3 Information Processed on Behalf of Our Customers (End-User Data)
When a Customer deploys FomoBoost on their website, the Service may collect or process the following from End Users, depending on the campaign types and triggers the Customer configures:
- Device and browser data: IP address (which we typically truncate or hash for analytics), user agent, browser language, screen size, referrer.
- Behavioral data used for triggers: Page URL, time on page, scroll depth, click and hover events, page-view counts, session activity, and exit-intent signals — used to determine when to display a notification according to the Customer’s rules (Delay, Time on Site, Inactivity, Page Views, Exit Intent, Scroll, Click, Hover).
- Frequency-control identifiers: A first-party or third-party cookie or local-storage value used to enforce "Once per Session" or "Once per Browser" display limits and re-display rules.
- Information End Users submit into widgets: Email addresses (Email Collector), review text and ratings (Reviews), emoji or score feedback, requests, social-share clicks, coupon redemptions, and any other input fields the Customer configures.
- Conversion events: Where the Customer configures conversion notifications, anonymized or pseudonymized conversion data (e.g., "Someone in [City] just purchased [Product]") supplied by the Customer’s site.
We do not intentionally collect special categories of personal data (such as health, biometric, or political-opinion data) from End Users, and Customers must not configure FomoBoost to do so.
4. How We Use Information
We use Customer information to:
- Provide, operate, maintain, and improve the Service;
- Authenticate users, secure accounts, and prevent fraud or abuse;
- Process payments and send billing communications;
- Provide customer support and respond to inquiries;
- Send service announcements, updates, and security alerts;
- Send marketing communications (where permitted by law and subject to your right to opt out);
- Analyze usage trends, diagnose problems, and develop new features;
- Comply with legal obligations and enforce our Terms.
We use End-User information only to:
- Deliver the notifications, widgets, and campaign behaviors configured by the Customer;
- Enforce display frequency, page targeting, and re-display rules;
- Provide aggregated analytics to the Customer;
- Maintain the security and integrity of the Service;
- Comply with legal obligations.
We do not sell End-User personal information, and we do not use End-User information to build cross-Customer profiles or for our own advertising purposes.
5. Legal Bases for Processing (EEA, UK, and Switzerland)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR:
- Performance of a contract: To provide the Service you have subscribed to.
- Legitimate interests: To secure, improve, and market our Service, provided those interests are not overridden by your rights and freedoms.
- Consent: Where required (e.g., certain cookies, marketing emails). You may withdraw consent at any time.
- Legal obligation: Where processing is necessary to comply with applicable law.
For End-User data, the Customer is responsible for establishing the legal basis and obtaining any required consents.
6. How We Share Information
We do not sell personal information. We share information only as described below:
- Service providers (sub-processors): We share information with vetted third parties who help us operate the Service, including cloud hosting, content delivery networks, email delivery, analytics, payment processing, and customer support tools. These providers are bound by contractual obligations to use information only as instructed and to protect it appropriately. A current list of sub-processors is available upon request.
- Customers: End-User data collected through a Customer’s deployment is shared with that Customer (as the Controller of that data).
- Affiliates: We may share information within our corporate group for the purposes described in this Policy.
- Business transfers: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred subject to standard confidentiality protections.
- Legal compliance and protection: We may disclose information if required by law, subpoena, court order, or governmental request, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.
- With your consent: For any other purpose disclosed at the time of collection or with your consent.
7. International Data Transfers
We are headquartered and operate from [INSERT COUNTRY — e.g., the United States]. By using the Service, you understand that information may be transferred to, stored, and processed in countries other than your own, which may have different data-protection laws.
For transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, and supplementary measures where required.
8. Cookies and Tracking Technologies
We and our service providers use cookies, local storage, pixels, and similar technologies on the FomoBoost website and within Customer-deployed widgets. These are used for:
- Strictly necessary purposes: Authentication, security, load balancing, and remembering your preferences.
- Functionality: Enforcing display frequency limits ("Once per Session," "Once per Browser") and re-display rules within widgets deployed by Customers.
- Analytics: Understanding how the Service is used so we can improve it.
- Marketing (fomoboost.com only): Measuring the effectiveness of our marketing campaigns. We do not place advertising cookies in Customer-deployed widgets.
You can control cookies through your browser settings. On Customer websites, the Customer is responsible for obtaining any cookie consent required under local law (e.g., the EU ePrivacy Directive). Our Cookie Notice, where applicable, provides further detail.
9. Data Retention
We retain personal information for as long as needed to provide the Service and for the legitimate business or legal purposes described in this Policy.
- Customer account data: Retained while your account is active and for a reasonable period thereafter (typically up to 90 days after account closure) to allow account reactivation, then deleted or anonymized, except where longer retention is required by law (e.g., tax records).
- End-User data: Retained for the period configured by the Customer or, by default, for the duration necessary to deliver the campaigns configured. Customers can request deletion of End-User data at any time.
- Backups and logs: May persist for a limited additional period before being overwritten.
10. Data Security
We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls, hashing of credentials, and regular security reviews. However, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
11. Your Privacy Rights
Depending on where you live, you may have the following rights regarding personal information we hold about you as a Controller:
- Access: Request a copy of the personal information we hold about you.
- Rectification: Request correction of inaccurate or incomplete information.
- Erasure ("right to be forgotten"): Request deletion of your personal information.
- Restriction: Request that we limit how we process your information.
- Portability: Request a copy of your information in a portable, machine-readable format.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: Where processing is based on consent, withdraw it at any time.
- Lodge a complaint: With your local data-protection authority.
California Residents (CCPA/CPRA): You have the right to know what personal information we collect, to delete it, to correct it, to opt out of "sale" or "sharing" (we do not sell or share personal information as those terms are defined under the CPRA), and to limit the use of sensitive personal information. You also have the right not to be discriminated against for exercising your rights. Authorized agents may submit requests on your behalf with appropriate verification.
How to exercise your rights: Email us at [INSERT PRIVACY EMAIL — e.g., privacy@fomoboost.com]. We will verify your identity before responding and will respond within the time required by applicable law (generally 30 days for GDPR, 45 days for CCPA, extendable where permitted).
If you are an End User of a Customer’s website, please direct your request to that Customer first. We will assist them in fulfilling verified requests.
12. Children’s Privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it. Customers must not configure FomoBoost on websites primarily directed to children.
13. Third-Party Links and Services
The Service may contain links to third-party websites, plugins, or services (such as the WordPress.org plugin directory or payment processors). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.
14. Do Not Track
Some browsers transmit "Do Not Track" signals. Because there is no industry standard for honoring DNT signals, we do not currently respond to them. We honor recognized opt-out preference signals as required by applicable law (e.g., Global Privacy Control under the CPRA).
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date and, if changes are material, provide additional notice (such as by email or an in-product notice). Your continued use of the Service after changes become effective constitutes acceptance of the revised Policy.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
FomoBoost
Email: [INSERT PRIVACY EMAIL — e.g., privacy@fomoboost.com]
Support: [INSERT SUPPORT EMAIL — e.g., support@fomoboost.com]
Postal address: [INSERT REGISTERED BUSINESS ADDRESS]
Website: https://fomoboost.com
If you are in the EEA or UK and wish to contact a representative or our Data Protection Officer (if appointed), please email the address above.