Privacy Policy
Last updated: August 11, 2026
This Privacy Policy explains how AOS (“we”, “us”) collects, uses, and shares information when you use our websites, storefront, AOS experience, accounts, and related services (the “Service”).
1. Information we collect
Account data. Email address, display name, password credentials (stored as a secure hash), avatar URL when provided by you or a social provider, and authentication identifiers from providers such as Google, X, or TikTok.
Commerce data. Cart contents, favorites, shipping addresses, order details, payment status metadata, after-sales requests, and support references.
Program data. Purchase points, referral relationships, invite codes, reward ledger entries, and related progress metrics.
Technical data. Approximate IP address, browser/user agent, device language, cookies or similar session tokens needed to keep you signed in, and diagnostic logs for security and reliability.
2. How we use information
We use information to create and secure accounts; process orders and payments; show order history; operate points and referral programs; prevent fraud and abuse; provide customer support; improve the Service; and meet legal obligations.
3. Social sign-in
If you choose Google, X, TikTok, or another configured provider, we receive the profile fields that provider shares with our app (for example display name, avatar, and email when permitted by that provider and your settings). We do not receive your social account password.
4. Cookies and sessions
We use HttpOnly session cookies and related tokens to authenticate API requests, protect against CSRF, and keep you signed in across the AOS shell and mall. You can clear cookies in your browser; doing so will sign you out.
5. Sharing
We may share information with payment processors, hosting and infrastructure providers, email delivery services, and other vendors that help us operate the Service under contractual confidentiality obligations. We may also disclose information if required by law or to protect users, the Service, or the public. We do not sell your personal information.
6. Retention
We retain account, order, and ledger records for as long as needed to provide the Service, resolve disputes, enforce our Terms, and meet legal, tax, and accounting requirements. You may request deletion subject to those obligations.
7. Security
We use industry-standard safeguards such as hashed passwords, session controls, and transport encryption where configured. No method of transmission or storage is completely secure.
8. International transfers
The Service may be hosted or operated in locations different from where you live. By using the Service, you understand that your information may be processed in those locations.
9. Your choices
Depending on applicable law, you may request access, correction, or deletion of certain personal data, or object to some processing. Contact us using the details below. You can also disconnect social providers through your account settings when available, or stop using the Service.
10. Children
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.
11. Changes
We may update this Privacy Policy from time to time. We will revise the “Last updated” date on this page when changes are posted.
12. Contact
Privacy questions: [email protected].