Privacy Policy

01Who we are and what this policy covers

ASURViO Shield is a product of Asurvio, LP, which also operates Driver Support. In this policy, ‘ASURViO Shield,’ ‘we,’ ‘us,’ and ‘our’ refer to Asurvio, LP as the operator of the services covered here.

This policy describes the information practices associated with ASURViO Shield. Other Asurvio products and services, including Driver Support, are covered by their applicable privacy notices.

This policy applies to the ASURViO Shield website, computer application, browser extensions, account portal, any ASURViO Shield mobile companion applications we make available, and related protection and email support services. It applies when you access these services from a computer, phone, or tablet. It covers information that identifies, relates to, or can reasonably be linked to a person or household, including information linked to a device or online identifier.

ASURViO Shield provides protection around websites, links, emails, and downloads used on computers. Mobile access and companion features are limited to the functions made available in that experience. Accessing your account from a phone or tablet does not extend computer protection to that device or provide protection for telephone calls or text messages.

This policy explains our practices; it does not replace permission requests or consent that the law requires. Where consent is required, we ask for it separately and explain how to withdraw it.

02Information we collect and where it comes from

The information we handle depends on the services and features you use, the permissions you grant, and your interactions with us. Information can come directly from you, from your computer, mobile device, application, or browser when you use Shield, or from providers that help operate your account and subscription.

We seek to limit the information handled for each feature to what is reasonably necessary for its disclosed purpose. A data category described for one feature does not mean that every Shield feature collects that information.

Account and subscription information

We collect information you provide to create, access, or manage an account, such as your name, email address, account identifiers, and preferences. We process subscription and transaction records to administer purchased services.

Payment information is handled through the payment services used at checkout. We use subscription and transaction records to administer your purchase, address billing questions, and meet applicable recordkeeping obligations.

Checkout, renewal, refund, and billing-support interactions may involve both ASURViO Shield and the payment service used for the transaction. The payment service’s own privacy notice applies to its independent processing. Billing records associated with your Shield account are handled under this policy. A privacy deletion request does not by itself reverse a charge or cancel a subscription.

Information you provide for support

When you email us, we receive your email address, your message, and any attachments or account information you provide. We use this information to respond and resolve your request. Please avoid sending passwords, full payment card numbers, or sensitive information that is unrelated to your request.

If you choose to send screenshots, diagnostic reports, or software logs to our support team, we receive the information contained in those materials. They may include technical details or personal information. Sending a support attachment is separate from the transient email or screenshot analysis described in Section 4; support submissions follow the support-record retention rules in Section 9.

Browser and computer protection information

Protection features may process information about the item being checked, such as a website address, a link, download or application identifiers, and the resulting protection event. Application checks can include installed application names, versions, and other identifying details. Results may be associated with your account to support the service.

The information processed, whether it remains on your computer or is sent to our servers, and what is retained depend on the feature. Browser extension practices are described in Section 3. Email and screenshot analysis are described in Section 4.

Desktop application and protection events

The computer application and browser extension perform different parts of the protection experience. Where an enabled computer feature checks an application, download, or remote-control tool, it may process the item’s identifying details, application name and version, the resulting classification or warning, and the associated protection event. This information supports the relevant protection check and any protection history made available to your account.

An event record can describe a check, warning, block, or other protection outcome without containing the original item analyzed. Depending on the feature, related records may include a timestamp, event identifier, device or account association, and the action selected in response to a warning. Installation and activation outcomes can also be used to diagnose setup problems and confirm whether the requested service is functioning.

Technical information can itself be personal information. For example, an application or file identifier may remain linked to a device, and a website address or file path can contain a name, account reference, or other private detail. We apply the relevant handling restrictions to those records rather than assuming that all technical records are anonymous.

Background checks and checks you request

Enabled protection features may check relevant activity as it occurs, subject to the permissions and settings for that feature. A feature that asks you to submit content processes the content supplied through that action. Background protection, an on-demand protection submission, and an attachment deliberately sent to support are different processing activities; the handling commitments for each are described separately in this policy.

A protection feature’s ability to examine an item does not mean that every check sends the entire item to our servers or retains it afterward. Email and screenshot content is handled as described in Section 4. Protection-event records and other retained technical records follow Section 9, and extension data is also subject to Section 3.

Website and consent records

Website interactions can generate browser and device information, online identifiers, IP address information, page URLs, timestamps, and cookie preferences. These records can help operate the website, maintain consent choices, assess performance, and measure marketing activity. Online identifiers and related browsing information may be personal information even when they do not include your name.

Mobile access and companion applications

When you access the website or account portal from a phone or tablet, the website and account practices in this policy apply. For a mobile companion application, the information processed depends on the features offered on your platform and the functions you use. Android and iOS versions may offer different features and require different permissions. The categories below describe mobile processing where the corresponding feature is available.

Where a companion feature displays information from a linked computer or shared account, we process the account and protection records needed to provide that view. Signing in from a mobile device may associate that app installation or session with your account. Information that remains linkable to you, your account, or your device is personal information, including when used for product performance analysis.

If a mobile feature lets you submit a link, image, screenshot, file, or support attachment, we process the material you choose to submit for that feature. The email and screenshot analysis commitments in Section 4 and the support-attachment practices in Section 2 apply to the corresponding submissions. Mobile access does not create an exception to those commitments.

03Browser extensions

The ASURViO Shield browser extension provides the browser protection features made available for your supported browser and account. Its access depends on the permissions granted, the sites on which it is enabled, and the feature being used. Browser versions and platforms may support different features.

Permissions and protection checks

Browser permissions may allow a protection feature to examine a website address, link, relevant page content, or email content displayed in a supported webmail service, or to process an image you submit for analysis. The information used depends on the specific check. Broadly worded browser permission notices describe the access a browser permits; they do not mean every item visible in the browser is collected or retained.

We process information needed for the protection check, such as the item being assessed, the resulting warning or assessment, and associated event identifiers or timestamps. Some information may be analyzed in the browser, while the content described in Section 4 is sent to our servers. The email and screenshot commitments in that section apply to extension submissions and are not changed by the permissions granted.

Account linking and technical information

When you sign in or link the extension to your account, account and session information supports authentication, access to purchased features, and the account views made available for your role. Browser and extension versions, settings, feature interactions, protection results, and diagnostic information may be processed to operate, secure, and troubleshoot those features. Retention follows Section 9, subject to the specific content-handling commitments in Section 4.

Limits on extension data use

We limit information accessed through the extension to its disclosed protection purpose and related operation, security, and performance needs. We do not use extension browsing activity for personalized advertising or transfer it to data brokers. Where Chrome Web Store policies apply, our use of extension user data will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

For data subject to those requirements, third-party transfers are limited to supporting the disclosed purpose, addressing fraud or security threats, complying with law, or a business transfer with the required explicit prior consent. Human access is limited to your explicit permission for specific data, necessary security or legal purposes, or permitted internal use of aggregated and anonymized information. These restrictions also apply to derived or de-identified extension data; the Product Improvement provision in Section 6 does not override them.

Your browser controls

You can review extension permissions and available site-access settings through your browser. Restricting access, disabling the extension, or removing it may prevent the corresponding browser protection from operating. Removing the extension does not automatically remove the computer application, delete your account or previously collected records, stop services on other devices, or cancel your subscription. Privacy requests and deletion instructions are provided in Section 11.

04Email and screenshot analysis

Some protection features need to examine the content you ask Shield to check. That content can include personal information about you and other people. Review the relevant permission notice and avoid submitting unrelated sensitive information.

Email analysis

When email scanning is on, Shield checks the emails you open for signs of scams, using automated tools including AI. Email content is used only for that check and is not stored. We keep the result of the check so Shield can show it to you.

Screenshot analysis

To protect you from possible scams, Shield may analyze a captured image, using automated tools including AI. If no scam is found, the image is not kept. If a scam is found, we may keep the image to confirm the finding, protect other users, and improve how Shield detects scams. We don’t keep images that contain personal information, although automated tools can make mistakes. Kept images are deleted after 90 days.

Scan results and identifiers

Scan activity records may include the time of a check, its result, and a unique identifier. Replacing a name with a unique identifier does not automatically make a record anonymous. Where a record can reasonably be linked to you, your account, or your device, we treat it as personal information.

Scan records may support protection activity and service performance. Where records remain linked to an account or device, they remain personal information and are handled under the relevant disclosures in this policy. Product improvement using information that cannot reasonably identify you or your device is described separately under Product Improvement in Section 6.

05Automated analysis and artificial intelligence

Protection features may use automated rules, reputation information, machine learning, or other artificial intelligence to evaluate items for signs of scams or other threats. The input depends on the feature and can include the website address, link, email content, submitted screenshot, or application information described in this policy. The resulting assessment may include a classification, warning, explanation, or recommended action.

Processing for a protection assessment

Using information to produce the protection assessment you request or enable is part of delivering that feature. It is distinct from keeping information for later product development or training a model. Information linked to your account, device, or submission remains personal information even when an automated system processes it.

Service providers that supply hosting, automated analysis, or AI processing may receive information needed for their part of the protection service. Such disclosures remain subject to the purposes, provider restrictions, and safeguards described in Section 7, as well as the extension restrictions in Section 3 where applicable. The raw email and screenshot handling commitments in Section 4 continue to apply; this section does not create an additional retention permission.

Product improvement and model training

We may use screenshots we keep under Section 4 to train and improve the automated tools Shield uses to detect scams. We don’t use them to train general-purpose AI models, and we don’t allow other companies to use them to train their own models. Screenshots used this way are still deleted after 90 days, and the tools trained with them are used only to provide Shield’s protection.

We don’t use email content to train models. Other identifiable protection submissions are used for training only as described in this section.

Account-linked diagnostics, performance records, and protection-event history are distinct from the non-identifying information covered by that provision. Applying an automated process to personal information, or replacing a name with an identifier, does not by itself satisfy the de-identification standard.

Assessments and human access

Automated assessments help identify and explain possible threats. They can be incomplete or incorrect. The information associated with an assessment is handled under the rules for that feature, including the distinction between transient input content and retained results. Providing an assessment does not require a customer to accept its recommendation.

Where authorized personnel access personal information to provide requested support, investigate security issues, or meet legal obligations, that access must relate to the applicable purpose. Restrictions on human access to extension data are described in Section 3. Sending a support attachment is a separate action from submitting content for a protection assessment, and support records follow the retention criteria in Section 9.

06How we use personal information

We use personal information to provide the protection features you use; operate accounts and purchased subscriptions; respond to support requests; send service and security notices; maintain the security and reliability of our services; investigate misuse; and satisfy legal and recordkeeping obligations.

We use service information for the specific purposes described in this policy and website interaction information to understand how visitors find and use our website. Where permitted, we send ASURViO Shield marketing emails subject to your communication choices. The separate Product Improvement paragraph below describes our use of aggregated or de-identified information.

Any new purpose that requires additional notice or consent will be explained before we use the information for that purpose.

Product Improvement.

We may use aggregated or de-identified information, which cannot reasonably be used to identify you or your device, to analyze trends, measure product performance, develop new features, and improve our products and services. This may include information about how our software is used and how it performs, such as feature usage, scan results, and installation outcomes. We take reasonable measures to ensure this information cannot be associated with you, and we will not attempt to re-identify it.

This use is limited to information that meets the standard described above. Information that remains reasonably linkable to you or your device is still personal information. This paragraph does not change the email and screenshot handling commitments in Section 4 or authorize an otherwise undisclosed use of identifiable content.

De-identification is assessed in context, including whether records can be combined with account data, device identifiers, detailed timestamps, website addresses, or other available information to identify a person or device. A label such as “anonymous,” an aggregate count, or removal of a name does not automatically make information non-identifying. Information that remains reasonably linkable is subject to the personal-information provisions of this policy.

07When we disclose information

We disclose information to service providers that help deliver the services, such as hosting, account administration, payment processing, email delivery, customer support, and protection analysis. Providers receive information relevant to their work and are subject to appropriate contractual restrictions and safeguards.

For mobile features, these provider categories may also include services that support app hosting, authentication, crash diagnostics, and notification delivery. Such processing is covered by this policy whether provided directly or through software integrated into an application. The information involved depends on the feature and provider service used.

The information needed by a provider depends on its role. For example, account and payment services support transactions and access, email and notification services deliver communications, hosting services operate the underlying systems, and protection-analysis services help assess the item being checked. Access to information for one of these roles does not itself authorize an unrelated use.

Providers acting on our behalf remain subject to the relevant processing restrictions. A third party that you use independently, such as your email provider, browser provider, or payment service acting for its own purposes, may also handle information under its own notice. Section 16 explains that distinction.

We may disclose information where required by law or where reasonably necessary to address fraud or abuse, protect people and the service, or establish, exercise, or defend legal rights.

Information may also be transferred in connection with a merger, acquisition, reorganization, or transfer of assets, subject to applicable safeguards, notice, and consent requirements. We may disclose information at your direction or with your permission.

We do not sell, rent, or trade personal information for money. We work with advertising partners to measure and improve our advertising. This can include sharing information such as cookie identifiers, the pages you visit on our website and whether you buy Shield. Some privacy laws treat this as ‘sharing’ or ‘targeted advertising’. You can opt out using a Global Privacy Control signal or the request process in Section 11, or, where offered, through our website’s cookie settings. Information from Shield’s protection features, such as emails and screenshots, is never used for advertising.

Family and shared accounts

A family plan has an administrator and members. The administrator manages the plan: they invite and remove members, choose protection settings for the plan’s computers, and can see each member’s name and email address, the computers on the plan and their protection status, and protection activity on those computers. Members see their own information: their account, the computer assigned to them, and that computer’s protection status and activity. Members can’t see other members’ activity or change protection settings.

Family-account access does not change the email or screenshot handling commitments in Section 4. The availability of account information on a phone or tablet does not itself authorize access to additional device content.

Removing a device, changing a member’s role, or leaving a shared plan changes the access associated with that action; it does not by itself erase information already received by another authorized account user or delete records that remain subject to this policy. Privacy requests about a member’s own information can be made using Section 11.

08Cookies and website privacy choices

Cookies and similar technologies can help our website function, remember preferences, document consent, understand usage, and measure marketing. Some may contain or be associated with identifiers, browsing activity, or other personal information. Website tracking is separate from content processed to provide protection.

These website practices also apply when you visit from a mobile browser or open website content from an application. Mobile app information is described separately in Section 2. The website advertising disclosures do not authorize a separate use of email or screenshot protection submissions for advertising.

Essential technologies support functions such as authentication and consent records. Nonessential analytics or advertising technologies are subject to applicable consent and opt-out requirements. Where the law requires it, we ask for your choice before using nonessential cookies, and you can change it at any time through our website’s cookie settings. Elsewhere, you can opt out of advertising cookies and sharing using a Global Privacy Control signal or by contacting us as described in Section 11. You can also manage cookies through your browser. Blocking essential cookies may affect sign-in or other requested functions.

Do Not Track and Global Privacy Control are different browser signals. Our website does not respond to the older Do Not Track signal. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of advertising cookies and of sharing your information for advertising, for that browser.

Analytics and advertising choices

A choice about website analytics or advertising applies to the processing and identifiers covered by that choice. Depending on the control, it may apply only to the browser or device on which it is made. Clearing cookies, changing browsers, or using another device may require you to set the choice again. A legally recognized opt-out preference signal applies within the scope required by applicable law.

An advertising opt-out does not necessarily stop all advertising; it can instead limit the use of personal information for selecting ads. Website cookie choices are separate from protection settings, mobile permissions, email subscriptions, and privacy deletion requests. You may also submit an applicable sale, sharing, or targeted-advertising opt-out request using Section 11.

Email interaction information

Where our email communications use measurement technologies, interactions such as opening a message or following a link may generate records about the interaction, its time, and related device or browser details. Those records support communication performance measurement and are distinct from the email content analyzed by Shield’s protection features. We apply any separate notice, consent, or withdrawal requirements that govern such measurement. Unsubscribing from promotional email and changing a choice about measurement are different actions.

09How long we keep information

Retention depends on the information and its purpose. We keep account and subscription records for the period needed to provide the service and meet applicable billing, tax, dispute, and legal obligations. Support records are kept for the period needed to resolve requests and meet relevant recordkeeping requirements.

We determine retention for protection event records, technical records, and consent records by considering the purpose of the record, whether it remains necessary to deliver a feature you use, troubleshooting and security needs, and applicable legal requirements. Raw email and screenshot content remains subject to the specific processing commitments in Section 4.

When information is no longer needed, we delete it or de-identify it in accordance with our retention procedures. Legal holds can require us to keep specific records longer. Retention also accounts for the time needed to remove records from backups and service-provider systems, subject to the specific commitments in Section 4.

These retention criteria also apply to mobile sign-in records, app diagnostics, installation identifiers, notification-delivery records, and synchronized account information where processed. Signing out or uninstalling a companion app does not necessarily remove records already held in your account or by our service providers. To request deletion, follow Section 11; deletion remains subject to the applicable exceptions described there.

How retention criteria apply to different records

Account and transaction records support access to purchased services, billing reconciliation, refunds, disputes, tax requirements, and other recordkeeping obligations. Support messages and attachments support resolution of the request and related follow-up. Protection-event records support the activity history, troubleshooting, and security needs for which they are retained. Technical and diagnostic records support investigation of faults, service reliability, and security issues. Consent and privacy-request records document choices, responses, and compliance.

Different records can therefore have different retention periods. Closing an account or removing software does not necessarily end every applicable legal or recordkeeping purpose. Any retained personal information remains subject to the purpose and access restrictions in this policy; a retention exception is not permission for an unrelated new use.

The email and screenshot commitments in Section 4, including when a screenshot is kept and for how long, take precedence over the general retention criteria. A retained result, event identifier, or support attachment must not be confused with the transient input content covered by those commitments.

10Your settings and communication choices

You can manage browser and mobile-device permissions and the protection settings available to your account role. Restricting permissions or disabling a feature may reduce the protection that feature provides. Removing an application or extension stops its future operation on that device; it does not by itself delete your account or previously collected information, cancel a subscription, or stop Shield on other linked devices.

To stop promotional emails, use the unsubscribe link in a marketing message or email shieldsupport@asurvio.com. You may continue to receive account, purchase, security, and other necessary service messages. Marketing choices do not change your purchased protection.

Account management, billing, and cancellation are governed by the applicable service terms. You can contact our email support team for assistance. A privacy deletion request is distinct from a subscription cancellation request.

Mobile permissions and notifications

Mobile permissions depend on the features offered and your device’s operating system. Where a feature requires access to device capabilities or selected content, we explain the access and request permission where required. You can review and change permissions through your device settings or the controls made available for that feature. Denying a permission may prevent the related feature from working.

If you enable push notifications, we and our notification-delivery providers may process a device or app notification token and delivery information to send the alerts or messages enabled for that feature. You can manage notifications through device settings and available app controls. Notification previews may be visible on a locked or shared device, depending on your settings. Turning off push notifications does not change your subscription or stop necessary account or security communications through other channels.

Signing in to your account does not, by itself, grant access to your precise location, contacts, camera, microphone, or photo library. Access for an offered feature is subject to the relevant device permissions and any required notice or consent. A device permission and a choice about analytics or advertising serve different purposes; one does not automatically authorize the other.

A mobile-device permission does not replace any separate privacy consent required by law. Signing out, changing permissions, deleting an account, and canceling a subscription are separate actions. Privacy request instructions in Section 11 also apply to mobile access and companion applications.

11Your privacy rights and how to make a request

Depending on your location, the law that applies to us, and the circumstances, you may have rights to confirm whether we process personal information; access information and obtain a portable copy; correct inaccuracies; request deletion; and opt out of a sale, certain sharing, targeted advertising, or profiling used for decisions with legal or similarly significant effects. Applicable law may also provide rights concerning sensitive information and withdrawal of consent.

Email shieldsupport@asurvio.com with the subject ‘Privacy Request.’ Describe the right you want to exercise and provide the account email address, if you have an account. You do not need to create an account to submit a request. Do not include passwords or full payment card details.

We may ask for information reasonably necessary to verify your identity and protect your information. Requests made through an authorized agent are handled as required by applicable law. Verification requirements depend on the request; opt-out requests will not be subjected to identity verification where the law prohibits it.

We respond within applicable legal deadlines. If we deny a request, we explain the reason and any available appeal procedure. Where you have a right to appeal, reply to the decision or email shieldsupport@asurvio.com with the subject ‘Privacy Appeal.’ If an appeal is denied, we provide information about applicable regulator complaint options.

We will not unlawfully discriminate against you for exercising privacy rights. Some requests are subject to exceptions, such as records we must retain by law or information necessary to fulfill a requested service.

Requests involving linked devices or shared accounts

When making a request, identify the account or device information relevant to it so that we can locate the records and avoid affecting another person’s information. A shared-plan administrator may need separate authority to exercise privacy rights for another member. We may distinguish information about the requesting person from information about other people in the same account.

Deletion can affect access to account history or a feature that requires the deleted information. It does not necessarily delete copies controlled independently by another account user or third-party service. We explain applicable exceptions and verification needs when handling the request. Where consent is the basis for processing and you withdraw it, that withdrawal does not retroactively change the lawfulness of processing already carried out.

If you believe we have not addressed your request appropriately, use the appeal instructions above where available. You may also have the right to contact the relevant privacy regulator or attorney general. Exercising a privacy right does not require purchasing another service.

12Additional information for California residents

Where the California Consumer Privacy Act applies, California residents have the rights described in Section 11, including rights to know, delete, correct, and opt out of a sale or sharing of personal information, and to limit certain uses or disclosures of sensitive personal information where applicable.

The categories described in Section 2 may include identifiers, customer account information, commercial records, internet or electronic activity, and email or submitted content that may qualify as sensitive personal information. We obtain these from the sources described there and use them for the purposes explained in this policy.

The service-provider categories and other circumstances in which we disclose information are described in Section 7. Retention periods depend on the purposes and criteria in Section 9, including the specific email and screenshot processing commitments in Section 4. California residents may submit a request using the instructions in Section 11.

Email content and screenshots can incidentally contain sensitive personal information, such as financial, health, or account-access details, whether or not that information is needed for the protection check. Submit only what is relevant. The presence of sensitive content does not expand the purposes for which it may be used, and any applicable right concerning sensitive information can be raised through Section 11.

13Security and international processing

We use reasonable administrative, technical, and physical safeguards appropriate to the information we handle. These include access restrictions and protections for sensitive information in transmission. No system can guarantee absolute security.

We process information in the United States. Some service providers, such as providers of AI analysis, advertising and analytics, may also process information in other countries, under contracts that require them to protect it.

14Additional information for individuals outside the United States

This section supplements the rest of this policy where privacy law outside the United States applies to our processing. It includes information for individuals in the European Economic Area (EEA), the United Kingdom (UK), and Switzerland. The EEA includes the European Union, Iceland, Liechtenstein, and Norway. Rights and requirements depend on the applicable law and the processing involved; this section does not expand the features or geographic availability of ASURViO Shield.

Responsibility for your information

Asurvio, LP is the controller of the personal information it processes for the ASURViO Shield purposes described in this policy. This means it determines why and how that information is processed. Contact us at shieldsupport@asurvio.com or at the privacy-request address in Section 18. Independent services, such as an email provider or payment service acting for its own purposes, remain responsible for their own processing.

Legal grounds for processing in the EEA and UK

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies, the legal ground depends on the particular purpose and information involved. We rely on the following grounds only where their requirements are satisfied:

Contract. We process information necessary to enter into or perform our agreement with you, including creating and authenticating your account, administering your purchased subscription, and delivering the protection functions you request. An activity is not necessary for a contract merely because it is mentioned in service terms.

Legitimate interests. Where permitted, we process information to maintain service security and reliability, investigate misuse, troubleshoot faults, respond to inquiries, and protect or defend legal rights. We assess these interests against your rights and freedoms. This ground does not replace consent where consent is required for cookies, marketing, or another activity.

Legal obligations. We process information when necessary to meet applicable legal requirements, such as required financial recordkeeping or responding to a legally binding request. Consent. We obtain consent where required for optional processing, including applicable nonessential tracking and marketing. Where we rely on consent, you may withdraw it at any time through the relevant control or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

Where a protection submission contains health information or other data subject to additional legal protections, a general legal ground alone may not be sufficient. Any applicable additional condition must also be satisfied. The presence of that information does not authorize unrelated processing, model training, or additional retention. Sections 3 through 5 continue to govern extension, email, screenshot, and automated-analysis processing.

Your regional privacy rights

Under applicable EEA and UK law, and subject to the conditions and exceptions for each right, you may request access to your personal information, correction, erasure, restriction of processing, or a portable copy of information covered by the portability right. You may object to processing based on legitimate interests and may object at any time to processing for direct marketing, including associated profiling. Where applicable, you also have protections concerning decisions based solely on automated processing that produce legal or similarly significant effects. Section 5 describes the automated protection assessments used by Shield.

Where Swiss law applies, you may request information about our processing, access to your personal information, correction, and, where applicable, deletion, restriction, or delivery or transfer of information in a portable format. The conditions for these rights may differ from those under EEA or UK law. Individuals elsewhere outside the United States may also have rights under their applicable local privacy law.

Use the request instructions in Section 11. We respond without undue delay and within the time required by applicable law, and explain any legally permitted extension or refusal. Providing information required for account access, purchases, or a protection check may be necessary to deliver the corresponding function. If you do not provide that information, or exercise a right that prevents processing necessary for that function, we explain the relevant service limitation. Optional consent is not required for unrelated functions.

International transfers and safeguards

ASURViO Shield is operated from the United States. If you visit our website or use our services from outside the United States, including from the EEA, the UK or Switzerland, your information is sent to and processed in the United States, where privacy laws may differ from those where you live. Some service providers may also process it in other countries, as described in Section 13. The service providers that process information for us are bound by contracts that require them to protect it.

Contact shieldsupport@asurvio.com to ask where your information is processed and how it is protected. Merely using our services or accepting this policy does not constitute consent to every international transfer.

Complaints and supervisory authorities

You may contact us about a privacy concern without giving up your right to contact a regulator. Where applicable, you may complain to the supervisory authority in the EEA country where you live or work, or where an alleged infringement occurred; the UK Information Commissioner’s Office (ico.org.uk); or the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch). You do not have to complete our internal complaint or appeal process before exercising an applicable right to complain to a regulator.

15Children and other people’s information

We do not knowingly collect or solicit personal information from children under 13. If you believe a child under 13 has provided personal information through the services, contact shieldsupport@asurvio.com so we can investigate and take appropriate steps to remove it.

Messages and screenshots submitted for protection may contain information about other people. Submit only the information appropriate for the protection feature you are using.

A family-plan label or an invitation from an administrator does not itself establish any parental consent required by law or authorize collection outside the scope of this policy. If information about a child appears incidentally in an adult’s submitted message or screenshot, the submission remains subject to the handling commitments for that protection feature. Contact us if you believe a child’s information has been submitted improperly.

16Third party services

Websites, email providers, payment services, and other third-party services may have separate privacy notices for their own practices. Review those notices when you use those services. When a provider processes information on our behalf, our responsibilities under applicable law and this policy continue to apply.

If you download an application through an app store, that store separately handles information under its own privacy notice. Store permissions, privacy disclosures, and account controls supplement this policy and do not replace the permissions, notices, or choices required for the processing described here.

17Changes to this policy

We update this policy when our services, information practices, or applicable requirements change. The last updated date at the top identifies this version. For material changes, we provide a prominent notice on our website or notify you by email where appropriate.

Material changes ordinarily take effect 30 days after notice. If law requires a different timetable or additional consent, we follow that requirement before applying the changed practice. Continued use does not replace legally required consent.

18Contact us

For privacy questions, requests, appeals, or an accessible copy of this policy, email shieldsupport@asurvio.com.

Asurvio, LP
Attn Privacy Requests for ASURViO Shield
PO Box 2022
Temple, TX 76503-2022
United States

ASURVIO MANAGEMENT, INC.
1035 CRESCENT
BELTON, TX 76513, Managing Partner