Privacy Policy
Effective Date: July 23, 2025
1. Scope
This Policy applies to Ask AI (also known as "Ask AI Assistant"), our Browser extension, related websites, and any communications that link to this policy.
2. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account Data | email address, password hash, subscription status | User |
| Payment Data | last 4 digits, billing ZIP, payment processor customer ID | Payment Processor |
| Extension Usage | queries submitted, features used, usage frequency | Extension (automatic) |
| Device/Browser Data | browser type, extension version, IP address | Automatic |
| Communication Data | support emails, feedback submissions | User |
We do not collect full payment card numbers; our payment processor handles that securely.
3. How We Use Information
- Provide and maintain the Ask AI Browser extension functionality
- Process payments and manage subscriptions
- Send transactional emails (receipts, subscription updates, etc.)
- Provide customer support and respond to inquiries
- Improve our extension and develop new features
- Monitor usage patterns to optimize performance
- Detect and prevent fraud or misuse
- Comply with legal obligations
4. Legal Bases (GDPR)
Where GDPR applies, we rely on contract performance (to provide our service), legitimate interests (to improve and secure our service), consent (where explicitly given), and legal compliance.
5. How We Share Information
| Recipient | Purpose |
|---|---|
| Payment Processors | Payment processing & subscription management |
| AI Service Providers | Processing AI queries (data not stored by providers) |
| Cloud Hosting Services | Data storage and application hosting |
| Analytics Services | Usage analytics and error monitoring |
We do not sell your personal data. We only share data with trusted service providers necessary to operate our service.
6. International Data Transfers
Data may be processed in the U.S. and other locations where our service providers operate. We use appropriate safeguards such as Standard Contractual Clauses where applicable.
7. Data Retention
We keep account data for as long as your account is active or as needed to provide services. After account deletion, we may retain some data for legal compliance or legitimate business purposes. Usage analytics may be retained in aggregated/anonymized form indefinitely.
8. Browser Extension Permissions
Our Browser extension requests only the permissions necessary to function:
- Active Tab: To interact with the current webpage when you use the extension
- Storage: To save your preferences and authentication status locally
- Host Permissions: To communicate with our servers for AI processing
We do not access or collect data from websites you visit unless you explicitly activate our extension on that page.
9. Security
We implement industry-standard security measures including TLS encryption, secure password hashing, access controls, and regular security reviews. However, no system is 100% secure—please keep your account credentials safe and report any suspected security issues immediately.
10. Children's Privacy
Our service is not intended for children under 13. If we learn we have collected data from a child under 13 without parental consent, we will delete it promptly. Parents may contact us with any concerns.
11. Your Rights
Depending on your location, you may have rights to access, correct, delete, or port your data, or object to certain processing. To exercise these rights, contact us using the information below. We will respond within 30 days (or as required by applicable law).
12. Do Not Track & Data Sales
We do not track users across third-party websites for advertising purposes, nor do we sell personal information as defined by privacy laws like CCPA/CPRA. We honor Global Privacy Control signals where applicable.
13. Contact Information
For privacy-related questions or to exercise your rights, contact us at:
14. Changes to This Policy
We may update this privacy policy from time to time. We will post any material changes here and notify users through the extension or email at least 30 days before changes take effect.