Privacy Policy
Last updated: 22 September 2025
Your Privacy Rights
We Ask Bettsy ("we", "us", "our") respect your privacy. This policy explains what we collect, why we collect it, and how you can exercise your rights. It is designed for the EU/EEA and aligns with the GDPR.
Plain-English version: We collect only what we need to run the Service, keep it secure, improve quality, and meet legal requirements. We don't sell your personal data.
1) Who we are & contact
For any privacy questions or requests: info@askbettsy.com.
2) What we collect
We collect the minimum necessary data when you use our AI-powered Service.
Account data: email, password hash, subscription status, plan, country (for tax/eligibility).
Payment data: handled by our payment processor (e.g., Stripe). We receive limited records (e.g., transaction IDs, last 4 digits, status) — not full card details.
Usage/technical data: device and technical information (IP address, browser type, OS), session timestamps, error logs.
Prompts/content: We do not store or review your AI prompts or chat content. They are processed to generate a response and are not retained by us, except brief, minimal logging necessary to deliver the request and ensure security.
Cookies: essential cookies to keep you logged in; optional analytics (see §7).
We do not intentionally collect special categories of data. Please do not submit sensitive data; if you do, it is processed only as needed to respond and then discarded.
3) Why we use your data (purposes)
- Provide the Service: account creation, authentication, subscription management, and delivering AI responses.
- Security & abuse prevention: fraud prevention, rate limiting, protecting accounts and systems.
- Service quality & analytics: fix bugs, measure performance, improve relevance (aggregate or de-identified where possible).
- Communications: transactional emails (receipts, service updates), and — only with consent or where allowed — occasional product messages.
4) Legal bases (GDPR)
- Contract: to provide the Service you requested.
- Legitimate interests: security, service quality, analytics (balanced against your rights).
- Consent: optional analytics/marketing; you can withdraw any time.
- Legal obligation: where required by law (e.g., tax records).
5) How long we keep data (retention)
We keep personal data only as long as needed for the purposes above:
- Account data: for your active account plus a short grace period after closure.
- Transactional records: as required by tax/accounting laws.
- Logs/technical data: short retention for operations and security, then aggregation or deletion.
6) Sharing your data
We share data with service providers that help us run the Service (hosting, payments, email, analytics, customer support). They act under contracts that require confidentiality and security and may not use your data for their own purposes. Examples include:
- Payments: Stripe processes payments; we receive limited metadata (no full card numbers).
- Hosting & infrastructure: cloud providers that host our application.
We may disclose data if required by law or to protect rights, safety, or the Service. We do not sell personal data.
7) Cookies & analytics (short version)
Essential cookies: required for login, security, and core features. Always on.
Analytics cookies: optional and off by default where required. You can change your preference via the cookie banner or settings.
Your browser may also allow you to block cookies; some features may not work without essential cookies.
8) AI processing (no human review / no training)
No human review: We do not human-review your prompts or chat content.
No model training: We do not use your prompts or chat content to train public models.
Where we rely on third-party AI vendors, we configure available settings to disallow training or data sharing beyond providing the Service.
Minimal logs: Only minimal operational logs are kept for short periods to deliver the request and protect the Service.
9) International data transfers
If data is transferred outside the EU/EEA, we use safeguards such as EU Standard Contractual Clauses (SCCs) and additional measures where appropriate.
10) Your rights (EU/EEA)
You can:
- Access your data and get a copy
- Correct inaccurate data
- Delete data (right to erasure)
- Restrict or object to certain processing
- Data portability (receive your data in a usable format)
- Withdraw consent at any time for consent-based processing
- Lodge a complaint with your local data protection authority
Contact us at info@askbettsy.com to exercise these rights. We may need to verify your identity.
11) Children
The Service is for 18+ only. We do not knowingly collect data from children.
12) Security
We use reasonable technical and organisational measures to protect personal data. No system is 100% secure, but we aim to prevent unauthorised access, disclosure, alteration or destruction.
13) Changes to this policy
We may update this policy from time to time. If changes are material, we will notify you via in-product notice or email. The date at the top shows the latest version.
14) Contact
Questions or privacy requests? info@askbettsy.com.
