Privacy

How ASOgenic handles account data, credentials, and service providers.

What we collect when you sign in

Signing in through ASOgenic's identity service gives us your verified name, email, and avatar image URL where the provider supplies them. We store those to identify your ASOgenic account and its workspaces. We never receive or store your password, and we never receive your contacts or other account data.

What we collect when you create a key

We keep the label and account information needed to manage the platform key. The raw key is shown only when it is created or rotated and cannot be retrieved later. If it is lost, rotate it from the dashboard.

Cookies

One session cookie, so you stay signed in. It's required for the app to work and carries no tracking payload.

This deployment also runs Google Analytics, which sets its own cookies to measure usage. See Google's privacy policy for what those collect.

How credentials flow

For hosted accounts, App Store Connect credentials are uploaded on the authenticated account dashboard. They are sent from your browser over HTTPS to ASOgenic for validation and encrypted storage. The MCP agent receives only non-secret connection status.

• The ASOgenic service validates the credential and stores it encrypted for your account. The private key is not returned through the dashboard or an MCP tool.

Service providers

• Auth0, which handles sign-in and gives us your verified ASOgenic identity.
• Paddle, our payment processor, if you upgrade a key. Paddle collects your payment details directly. We never see your card number, only whether a payment succeeded.

Deleting your data

Revoking a platform key disables it immediately. To request deletion of your account and associated data, including any persistently stored App Store Connect credential, contact us.

Questions about this page: [email protected].