Privacy Policy

Effective date: November 7, 2025

This Privacy Policy explains how AskHow ("askhow.io", "we", "us", or "our") collects, uses, shares, and protects your information when you use our website, products, and services (collectively, the "Services"). It also describes your choices and rights.

If you do not agree with this Policy, please do not use the Services.

1) Who we are & how to contact us

Data Controller: AskHow , operating askhow.io.

Contact: info@askhow.io

2) Scope

This Policy applies to information we collect:

• On askhow.io and any subdomains or apps we operate;
• In emails, messages, forms, and other electronic exchanges with you;
• From integrated third parties you choose to connect.

This Policy does not apply to third-party sites and services that we do not control—even if linked from our Services.

3) Information we collect

A. Information you provide

• Account details: name, email, password (hashed), profile information.
• User content: questions, prompts, answers, comments, files, attachments, feedback, and any metadata you include.
• Support communications: messages you send to us (e.g., help desk, surveys).
• Billing information: handled by Stripe payment processor; we receive limited details (e.g., transaction ID, last4, status).

B. Information collected automatically

• Usage data: pages viewed, features used, clicks, referring pages/UTM, timestamps, session duration.
• Device & log data: IP address, device identifiers, browser type/version, OS, language, error/crash logs.
• Cookies & similar: cookies, local storage, and tags for functionality, analytics, and (if enabled) marketing—see Cookies below.

C. Information from third parties (if you connect them)

• Single sign-on (SSO): name, email, profile photo, and tokens necessary to authenticate from providers such as Google, GitHub, or Apple.
• Payment processors: billing status and limited card details (not full PAN).
• Analytics/AI/anti-abuse services: signals that help us understand usage and protect the platform.

D. Sensitive information

We do not seek to collect sensitive categories of data (e.g., health, biometric, precise geolocation). Please do not submit such information in prompts or uploads.

4) AI features & model providers (if applicable)

• If you use AskHow’s AI-powered features, your inputs (prompts, files, context) and outputs may be sent to our AI service providers to generate results and to operate, troubleshoot, and secure the features.
• We contractually require providers to use your data only to provide the Services to us and to implement appropriate security measures.
• We do not use your private content to train our own models without your permission.
• Questions you are asking in the chat become public content in 24 hours (e.g., a how-to guide) and may be indexed or analyzed to improve public features.
• Avoid including personal data in prompts wherever possible.
• You can opt out of AI features by not using them or by adjusting settings where available.

5) Why we use your information (purposes)

We process information to:

• Provide, maintain, and improve the Services and AI features;
• Create and manage accounts; authenticate users;
• Personalize content and recommendations;
• Communicate with you (service messages, support, updates);
• Process payments and prevent fraud;
• Monitor security, debug, and fix errors;
• Comply with legal obligations and enforce terms.

6) Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on:

• Contract: to provide the Services you request;
• Legitimate interests: to secure and improve the Services, prevent abuse, and understand usage in a privacy-protective way;
• Consent: for optional cookies, marketing, and where required;
• Legal obligation: to comply with laws and regulatory requests.

You may withdraw consent at any time via the cookie banner or in-product settings (where available).

7) How we share information

We do not sell your personal information.

We share information with:

• Service providers/Processors: hosting, storage, analytics, AI providers, customer support, communications, payment processing, security/abuse prevention, logging/monitoring.
• Other users: when you publish content or collaborate, your profile and the content you choose to share may be visible.
• Legal, safety, and compliance: to protect rights, respond to lawful requests, or prevent harm.
• Corporate transactions: during or after a merger, sale, or asset transfer, subject to this Policy.

We require processors to protect your information and use it only per our instructions.

8) International transfers

We operate globally and may transfer information to countries with different data protection laws. When we transfer personal data from the EEA/UK/Switzerland, we rely on lawful mechanisms such as EU Standard Contractual Clauses (and UK addendum), adequacy decisions, or other safeguards.

9) Data retention

We keep personal data only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Typical examples (customize for your operations):

• Account data: retained while your account is active; deleted or anonymized within [30/60/90] days after closure, subject to legal holds.
• Logs/telemetry: [30–180] days.
• Support tickets: 1 year.
• Billing records: up to 3 years (for tax/audit).
• AI prompt/response data: [0–90] days for troubleshooting/abuse prevention (shorter where feasible).

10) Security

We use administrative, technical, and physical safeguards designed to protect personal data (e.g., encryption in transit, access controls, logging, least-privilege practices). No system is perfectly secure. You are responsible for maintaining the confidentiality of your credentials.

11) Your choices & rights

A. Account & communications

• Update account details in settings.
• Opt out of non-essential emails via unsubscribe links or settings.
• Control cookies via our banner and your browser (see below).

B. EEA/UK/Swiss residents

You may have the right to access, rectify, erase, restrict, object, and data portability. You also have the right to withdraw consent and to lodge a complaint with your local supervisory authority.

How to exercise: email info@askhow.io. We may request verification.

C. California (CCPA/CPRA)

We provide the rights to know/access, correct, delete, and to opt out of “sharing” (cross-context behavioral advertising). We do not sell personal information.

To exercise rights or to opt out of “sharing”, use our cookie preferences link (Do Not Sell/Share My Personal Information) or contact privacy@askhow.io.

Notice at Collection (summary):

• Identifiers: name, email, IP — sources: you; device — purposes: provide Services; security; support — disclosed to: processors (hosting, analytics, AI); support — sell/share: No sell; Share only if marketing cookies enabled
• Customer records: billing metadata — sources: you; payment processor — purposes: payments; compliance — disclosed to: payment processor; finance — sell/share: No
• Internet activity: usage data, logs — sources: device; cookies — purposes: analytics; security; improve Services — disclosed to: analytics; security tools — sell/share: Share only if marketing cookies enabled
• Inferences: preference signals — sources: analytics — purposes: personalize content/features — disclosed to: analytics — sell/share: Share only if marketing cookies enabled

We retain categories as described in Data retention.

12) Cookies & tracking

We use:

• Strictly necessary cookies: sign-in, security, core features;
• Functional/Preference cookies: remember settings;
• Analytics cookies: understand usage and improve Services;
• Marketing cookies (optional): if enabled, for measuring campaigns.

Manage choices any time via our cookie banner or [Cookie Settings link]. Most browsers also allow you to block or delete cookies. We do not respond to “Do Not Track” signals.

13) User content & public activity

Content you post publicly (e.g., questions, answers, guides, profile name/avatar) may be indexed by search engines and viewable by others. Avoid sharing personal data in public content.

14) Children’s privacy

The Services are not directed to children under 13 (or 16 where required). We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact info@askhow.io and we will take appropriate action.

15) Third-party services & links

Our Services may link to third-party sites or integrate third-party tools. Their privacy practices are governed by their own policies. Review those policies before using their services.

16) Managing your data

• Access/Export/Deletion: Request via support@askhow.io. We will verify your identity and respond within applicable timeframes.
• Authorized agent (California): You may designate an agent; we will require proof and your verification.
• Appeals (certain jurisdictions): If we deny a request, you may appeal by replying to our decision email.

17) Changes to this Policy

We may update this Policy from time to time. If changes are material, we will provide notice (e.g., via email or in-app). The “Effective date” reflects the latest version. Continued use of the Services after changes means you accept the updated Policy.

18) Contact

Questions or requests about this Policy or your data rights email to: info@askhow.io