AV (antivirus) companies normally do not sell user’s browsing data, as it goes against their commitment to user privacy and security. Their business model relies on protecting against cyber threats rather than exploiting user data.  But, recently, The Federal Trade Commission (FTC) ordered Avast to pay $16.5 million for selling Users’ browsing data.

Source: GBHackers