AVG's privacy policy has been changed: the company will now sell user browsing histories to third parties.