AskWek ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the AskWek application (the "Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address for authentication via one-time passcode (OTP). We do not collect passwords.

1.2 Usage Data

We collect information about how you interact with the Service, including conversations, agent usage, skill usage, and token consumption. This data is used to provide the Service and calculate billing.

1.3 API Keys (BYOS)

If you use the Bring Your Own Subscription (BYOS) feature, your API keys are stored encrypted in our database and used solely to make API calls on your behalf. We never log or transmit your API keys to third parties.

1.4 Phone Bridge Data

The Phone Bridge feature relays data (such as contacts or notifications) in real time between your phone and browser using a WebSocket connection. We do not store Phone Bridge data on our servers. Data is relayed in-memory and discarded when the session ends. No WhatsApp messages, SMS, or contacts are saved to our databases.

1.5 Connector Data

When you connect third-party services (Slack, Notion, GitHub, etc.), we store the access credentials you provide (webhook URLs, API tokens, PATs) encrypted in our database. We use these solely to execute workflow steps on your behalf.

2. How We Use Your Information

To provide, operate, and improve the Service
To process AI requests and route them to the appropriate model providers
To calculate and display your credit usage
To send authentication OTPs via email
To execute Workflows and Connector actions you configure
To respond to support requests

3. AI Model Providers

When you send a message, the content is transmitted to the AI model provider you have selected (Amazon Web Services Bedrock, OpenAI, Anthropic, or Google). Your use of these models is subject to each provider's own privacy policies and terms of service. We send only the minimum data required to fulfil your request — we do not send your email address or account identifiers to model providers.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in the following limited circumstances:

AI model providers — conversation content to fulfil AI requests (see Section 3)
Third-party connectors — data sent to services you have explicitly connected (Slack, Notion, GitHub, etc.)
Legal requirements — if required by law, regulation, or valid legal process
Business transfers — in the event of a merger, acquisition, or sale of assets, with appropriate notice

5. Data Retention

We retain your account data and conversation history for as long as your account is active. You may delete individual conversations at any time within the app. To request complete account deletion, contact us at [email protected]. We will process deletion requests within 30 days.

6. Security

We implement appropriate technical and organisational measures to protect your information, including encryption at rest and in transit (TLS), JWT-based authentication with short-lived tokens, and encrypted storage of API keys and connector credentials. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us and we will take steps to remove it.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Data portability (export your conversations)

To exercise these rights, contact us at [email protected].

9. Cookies

The AskWek web app uses local storage (not cookies) to persist your authentication token on your device. We do not use third-party tracking cookies or advertising trackers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:
[email protected]