Privacy Policy

This Privacy Policy explains how OpenAgent Pte. Ltd. ("AON", "we", "us") collects, uses, and shares information when you use AON Shopping through our website at aon.pro, our APIs, or any authorized integration that connects to our partner network. AON Shopping helps you discover physical goods from verified retail and e-commerce partners. We are not a merchant. All purchases are completed on the partner's own website under the partner's own terms.

1. What we collect

AON Shopping is designed to collect the minimum information necessary to return relevant product results and to make our partner network work reliably.

• Search queries. The product-related text you send to AON Shopping (for example, "wireless headphones under $200"). We do not request, store, or attempt to access any broader conversation, browsing, or account history outside the request you send to AON.
• Tool invocation metadata. A timestamp, the tool name, and a coarse country/region signal where available, used to route the request to the correct partner endpoint and to enforce regional eligibility.
• Anonymous click identifiers. When you choose to open a partner offer, we generate a short-lived click_id that lets the partner confirm the visit came from AON. The click_id is not tied to your identity, email, name, or account.
• Operational logs and click signals.Standard server logs (request path, response status, latency) used to operate the service and detect abuse. When you follow an offer link, we record the click together with your IP address and user-agent, and we forward your IP address, user-agent, accept-language and referer to the partner as request headers so the destination site receives the visit as if you had gone there directly. These header values are forwarded unmodified. Separately, when a partner's destination link asks for a pseudonymous visitor identifier and none is supplied with the request, we derive one by hashing your user-agent together with your IP address (or, where one of those is unavailable, the click identifier) and pass that derived value to the partner. It is not derived from, and we do not link it to, your name, email address, or an account.

We do not collect payment card data, government identification, health data, biometric data, login credentials for any third-party service, or precise location.

2. How we use information

• To return product results that match your query.
• To route requests to the correct authorized partner and respect each partner's category and regional eligibility rules.
• To attribute partner-confirmed transactions back to AON for the purpose of settlement with the partner. Attribution uses the anonymous click_id only.
• To monitor service health, detect abuse, and protect the integrity of the network.
• To comply with legal obligations.

We do not sell personal information. We do not use the contents of your queries to train machine learning models. We do not serve third-party advertising inside AON.

3. How information is shared

• With authorized partners. Your product-related query is forwarded to one or more partners in our network so they can return matching offers. Each partner is subject to a written agreement and their own privacy policy, which applies once you choose to visit their website.
• With integration platforms. If you access AON Shopping through a third-party interface, the input you provide and the response we return may pass through that interface and may be subject to its own privacy terms.
• With service providers. Cloud hosting, database, and observability vendors that operate the AON platform under confidentiality and data-protection obligations.
• For legal reasons. If required by law, valid legal process, or to protect the rights, property, or safety of users or the public.

4. Data retention

Search queries and tool invocation metadata are written to a request journal for service operation and abuse prevention. The primary database copy is removed by a scheduled purge job whose default retention window is 7 days. A copy of the same records is also exported to our analytics warehouse, where they are stored as append-only rows and are not covered by that purge. Anonymous click_id records used for partner settlement are retained to support attribution reconciliation and settlement history; we do not currently operate a scheduled deletion job for them, and our automated cleanup removes test-generated records only. Operational logs follow standard cloud-provider retention, typically not longer than 30 days. We retain aggregated, non-identifying analytics indefinitely.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to certain processing of your information, and the right to data portability. Because AON Shopping does not require you to create an account and does not store account identifiers from third-party interfaces, we generally do not hold information that can be linked to you as an individual. If you believe we hold information about you, you can email us at the address below and we will respond in accordance with applicable law (including the EU GDPR and the California Consumer Privacy Act).

6. International transfers

AON operates from Singapore. Information we process may be transferred to, and stored in, jurisdictions outside your own, including Singapore and the United States. Where required, we rely on standard contractual clauses or equivalent safeguards for cross-border transfers.

7. Children

AON Shopping is not directed to children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with information, please contact us so we can delete it.

8. Security

We use industry-standard administrative, technical, and physical safeguards to protect information, including transport encryption (HTTPS / TLS), access controls, and audit logging. No system is perfectly secure; we cannot guarantee absolute security.

Website activity measurement

When enabled, AON records page visits, approved button clicks and registration steps directly in its own service by default. This uses random browser and session identifiers across our website and sign-in subdomain, campaign labels and an optional promotional email reference. Sessions expire after 30 minutes of inactivity. The browser identifier is kept for up to 30 days after activity. When collection is enabled, detailed activity is retained for up to 90 days with periodic deletion; registration acquisition records remain associated with your account. Successful registration allows AON to associate this activity with your internal account identifier.

When AON website activity collection is enabled and a visit includes utm_source, utm_medium, utm_campaign, utm_content, utm_id, or LinkedIn's li_fat_id, we keep the valid first-touch labels in a cookie for up to 30 days without renewal across our website and sign-in subdomain. We include those labels in AON activity events. If you create an account while that snapshot is valid, AON stores the labels and capture time with your internal account identifier for acquisition measurement. Promotional email links may also include a random reference associated with the original developer recipient. We retain that reference in the same first-touch cookie and associate it with a successful registration. A forwarded link still refers to its original recipient and does not verify the visitor's identity.

We no longer use Google Analytics on our website or sign-in and registration pages. An earlier rejection under our previous all-analytics notice continues to block AON activity collection while that saved preference remains valid. These preferences were saved for up to 180 days across our website and sign-in subdomain. This does not affect browsing, registration or sign-in.

Our hosting and security infrastructure may process connection metadata, including IP addresses and requested URLs, as part of serving requests. Request logs may contain campaign parameters and email references from those URLs independently of any saved analytics preference; these operational logs are separate from website activity measurement.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page and, where appropriate, provide additional notice (for example, on aon.pro).

10. Contact us

OpenAgent Pte. Ltd.
Email: [email protected]