Privacy Policy

We collect the following categories of information:

• Account information: when you register or sign in via Google OAuth or email, we collect your email address, display name, and authentication identifiers.
• Conversation content: the prompts, messages, files, and other inputs you submit to the AI, together with the responses generated.
• Subscription and billing data: plan type, billing cycle, transaction records, and limited payment metadata. Full card details are processed by our payment provider and are never stored on our servers.
• Usage and device data: feature interactions, log data, browser type, operating system, language preference, approximate region derived from IP, and diagnostic information.
• Cookies and local storage: identifiers and preferences stored on your device to keep you signed in and remember your settings.

We use the information we collect to:

• Provide, operate, maintain, and secure the Service.
• Authenticate users and manage accounts, subscriptions, and credits.
• Process the requests you send to AI models and return results to you.
• Improve and develop new features, and analyze aggregate usage trends.
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Communicate with you about service updates, security alerts, and support requests, and—where you have consented—marketing messages.
• Comply with legal obligations and enforce our Terms of Service.

Where data protection laws such as the GDPR apply, we process personal data on the following legal bases: performance of a contract with you (to provide the Service); your consent (for optional features and marketing); our legitimate interests (to secure and improve the Service); and compliance with legal obligations. You may withdraw consent at any time without affecting prior processing.

Your prompts and inputs are transmitted to third-party AI model providers solely to generate the responses you request. We do not sell your conversation content. We do not use your private conversation content to train our own foundation models without your explicit consent. AI providers process this data under their own terms and privacy policies, which we encourage you to review.

We rely on trusted third parties to operate the Service, including:

• Google OAuth for authentication.
• Stripe for payment processing.
• AI model providers (such as OpenAI, Anthropic, Google, and DeepSeek) to process your requests.
• Cloud hosting and analytics providers for infrastructure and diagnostics.

These providers act as independent controllers or as our processors and are governed by their own agreements and privacy policies.

We use strictly necessary cookies and local storage to maintain sessions and remember preferences, and limited analytics to understand how the Service is used. You can control cookies through your browser settings, though disabling certain cookies may affect functionality.

We retain personal data only for as long as necessary to provide the Service and for the purposes set out in this Policy, including to meet legal, accounting, or reporting requirements. Account data is retained while your account is active; upon deletion, we remove or anonymize your personal data within a reasonable period, except where retention is required by law.

We store data on secured servers and apply reasonable administrative, technical, and organizational measures—including encryption in transit, access controls, and monitoring—to protect your information. Your data may be processed in countries other than your own; where required, we implement appropriate safeguards such as standard contractual clauses. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law (including the GDPR and CCPA), you may have the right to:

• Access, correct, or update your personal data.
• Request deletion of your personal data ("right to be forgotten").
• Object to or restrict certain processing, and request data portability.
• Opt out of marketing communications at any time.
• For California residents: know what personal information is collected, request deletion, and not be discriminated against for exercising your rights. We do not sell personal information.

To exercise these rights, contact us using the details below. We will respond within the timeframe required by applicable law.

The Service is not directed to children under the age of 16 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from them. If we learn that we have collected such data, we will delete it promptly. If you believe a child has provided us with personal data, please contact us.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated version with a revised "Last updated" date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at cs@askway.ai. We will do our best to address your inquiry promptly.