Privacy Notice

Data we collect and why

• Account data — email address and login credentials, used to create and secure your account. Legal basis: performance of our contract with you.
• Content you submit — questions, threads, and documents you upload to a Space, used to generate answers and save your history. Legal basis: contract performance.
• Usage and telemetry — answer credits consumed, feature usage, error logs and device/browser information, used to operate, debug and improve the service. Legal basis: legitimate interests.
• IP address — stored in hashed form for visitors without an account, to enforce the daily free-question limit and prevent abuse. Legal basis: legitimate interests in preventing fraud and abuse.
• Support messages — what you send us, used to answer your request. Legal basis: legitimate interests.
• Billing records — subscription status and order references we receive from our reseller, used to grant the right plan and meet legal and accounting obligations. Legal basis: contract performance and legal obligation.

Who we share data with

• Service providers and subprocessors — cloud hosting and database providers, AI model and web-search providers that process your questions and documents to produce answers, and error-monitoring tooling.
• Paddle.com, our reseller and Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose data by law or to protect our legal rights.

We do not sell your personal data. Some providers are located outside your country; where data leaves the UK or EEA we rely on adequacy decisions or Standard Contractual Clauses as appropriate safeguards.

Retention

Account data, threads and uploaded documents are kept while your account is active and deleted within 30 days of account deletion. Hashed IP records for guest limits are kept for up to 30 days. Logs are kept for up to 12 months. Billing and tax records are kept as long as the law requires. When data is no longer needed it is deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to receive it in a portable format, and to withdraw consent where processing is based on consent. You can delete your account and its data at any time from your account page, or email us at Support@ask.miami. We respond within one month. If you are in the UK or EEA you may also complain to your local data protection supervisory authority.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage, row-level access controls so each account can only reach its own records, and restricted internal access.

Cookies

We use essential cookies and local storage to keep you signed in and to remember your preferences; these are required for the service to work. We do not use advertising cookies. You can clear or block cookies in your browser settings, though signing in will not work without the essential ones.

Contact

ChiefOS Inc — Support@ask.miami