Skip to main content
Skip to main content

Privacy Policy

Last updated: February 9, 2026

1. Introduction

2am.to is a product operated by 2am.tech (2amigos Consulting Group, LLC). We ("we," "our," or "us") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our URL shortening service.

Please read this Privacy Policy carefully. By using 2am.to, you agree to the collection and use of information in accordance with this policy.

This Privacy Policy is compliant with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

  • Create an account (name, email address, password)
  • Update your profile (company name, website, phone number)
  • Subscribe to a paid plan (billing information, payment details)
  • Contact customer support (support inquiries, feedback)
  • Create shortened URLs and custom slugs

2.2 Automatically Collected Information

When you use our Service, we automatically collect:

  • Click Data: IP address, browser type, device information, operating system, referrer URL, timestamp of each click on your shortened links
  • Usage Data: Pages visited, features used, time spent on the platform, interaction patterns
  • Location Data: Approximate geographic location based on IP address (city, country, region)
  • Cookie Data: See our Cookie Policy for details

2.3 Third-Party Data

We may receive information from third-party services you connect to your account, such as OAuth providers (Google, GitHub) for authentication.

3. How We Use Your Information

We use collected information for the following purposes:

  • Provide the Service: Create and manage shortened URLs, generate analytics, provide QR codes
  • Account Management: Create and maintain your account, authenticate users, process payments
  • Analytics: Track link performance, provide click statistics, generate reports
  • Service Improvement: Analyze usage patterns, improve features, fix bugs
  • Communication: Send account notifications, service updates, marketing communications (with your consent)
  • Security: Detect and prevent fraud, abuse, and unauthorized access
  • Legal Compliance: Comply with legal obligations and enforce our Terms of Service

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers

We share data with trusted service providers who assist us in operating the Service:

  • Cloud hosting providers (AWS, Google Cloud)
  • Payment processors (Stripe)
  • Email service providers
  • Analytics providers
  • Customer support tools

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

  • Valid legal requests (subpoenas, court orders)
  • Government investigations
  • Protection of our rights, property, or safety
  • Enforcement of our Terms of Service

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for:

  • Legal compliance (tax records, transaction history)
  • Fraud prevention and security
  • Backup and disaster recovery (typically 90 days)

Click analytics data may be retained for up to 2 years for statistical analysis and service improvement.

6. Data Security

We implement industry-standard security measures to protect your data:

  • SSL/TLS encryption for data in transit
  • AES-256 encryption for sensitive data at rest
  • Regular security audits and penetration testing
  • Secure password hashing (bcrypt)
  • Two-factor authentication (2FA) options
  • Access controls and employee training

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

7.1 Access and Portability

You have the right to access and download your personal data in a portable format.

7.2 Correction and Update

You can update your account information at any time through your profile settings.

7.3 Deletion

You can request deletion of your account and associated data. Contact support@2am.to to initiate account deletion.

7.4 Marketing Opt-Out

You can opt out of marketing emails by clicking the "unsubscribe" link in any email or by adjusting your notification preferences.

7.5 Do Not Track

We do not currently respond to Do Not Track (DNT) browser signals, as there is no industry standard for DNT compliance.

7.6 GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under GDPR:

  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object

To exercise these rights, contact privacy@2am.to

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. Third-Party Links

Shortened URLs may redirect to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, please contact us:

2amigos Consulting Group, LLC
Operating as: 2am.tech
Product: 2am.to

Email: privacy@2am.to
Data Protection Officer: dpo@2am.to
Support: support@2am.to
Website: 2am.tech
Contact Form: Contact Us

For GDPR-related requests (data access, deletion, portability), please email: gdpr@2am.to