Privacy Policy

The full policy is below, and it is what governs. This summary is here so you do not have to read all of it to know the shape of the thing.

• We never sell or rent your personal data, and we do not share it for cross-context behavioral advertising.
• We use Google Analytics, and you can say no. In the EEA, the UK and Switzerland it does not load until you accept; everywhere else you can turn it off from “Cookie choices” in the footer. Nothing else about the product changes either way. There are no advertising pixels and no cross-site tracking networks on this site.
• Your email address is never sent to an AI answer engine. Those requests carry the question and your brand or topic, and nothing about you.
• The tag you install on your own site is cookieless and records no IP address and no visitor identifier.
• You can have everything deleted. Email privacy@askwords.ai and it is gone within 30 days.

askwords.ai operates the askwords.ai website and service, and is the data controller for the personal data described in this policy. That means we decide why and how it is processed, and we are the party you can hold to this document.

For anything about privacy, data protection, or a request over your own data, write to privacy@askwords.ai. For everything else there is support@askwords.ai and the contact form.

One exception to our role as controller is the askwords tag: for the visitor data it reports from your website, you are the controller and we act as your processor. That is set out in §8.

We collect what the product needs and stop there. There is no data-broker feed, no enrichment of your record from third-party sources, and no advertising profile.

We do not ask for and do not want special category data: health, biometrics, political or religious views, and the rest of Article 9. Please do not put it into a check input or a support message.

Sign-in is passwordless. We never create, store or verify a password, so there is no password of yours for us to lose.

We use personal data only for these purposes:

• Running the checks you ask for and showing you the results.
• Creating your account, signing you in, and keeping your session secure.
• Repeating your saved questions on a schedule and comparing each result with the last.
• Sending the emails you asked for: sign-in links, change notifications, and product updates you opted into.
• Taking payment, applying your plan's limits, and issuing invoices.
• Answering support requests.
• Preventing abuse, enforcing rate limits, and protecting the service from fraud and automated attacks.
• Understanding which features are used, in aggregate, so we know what to build next.
• Meeting our legal, tax and accounting obligations.

We do not make decisions about you by automated means that produce a legal or similarly significant effect. The visibility score measures what public AI answers say about a brand. It is not a judgement about a person.

If you are in the European Economic Area, the United Kingdom or Switzerland, we need a legal basis under the GDPR for each purpose. These are ours:

Where we rely on legitimate interests, we have weighed them against your rights and freedoms. You can object at any time. See §12.

Running a check means asking real AI answer engines your buyer questions and reading what they say. Those requests leave our servers and reach the provider, so what is in them matters.

What we send: the question text, and the brand, product or topic the question is about. These are the same words a member of the public could type into the same product.

What we never send: your email address, your account identifier, your name, your IP address, your billing details, or anything else identifying you as the person who ran the check.

The providers we query are OpenAI, Google, Perplexity, xAI and Anthropic, and Google AI Overviews and AI Mode results are retrieved through DataForSEO. Each handles the request under its own terms and privacy policy. We use their business and API tiers, on which submitted content is not used to train their general models; we cannot guarantee a provider’s future policy, and we will update this section if one changes.

Because we query the engines without your personal account history, the answers you see in askwords.ai may differ from the answers you would see signed into your own account. That is deliberate: it is what makes one week comparable to the next.

There is no cross-site tracking on this site, no advertising pixel, and no fingerprinting. What there is falls into three groups: cookies the product cannot work without, a first-party counter we use to measure our own funnel, and Google Analytics, which is the only third party in the list and the only one you are asked about.

Google Analytics does not load until you accept it if you are in the EEA, the United Kingdom or Switzerland. We ask before anything is set, and refusing costs you nothing. Elsewhere it loads on arrival, and you can switch it off at any time from “Cookie choices” in the footer; that link also lets you withdraw a consent you gave earlier, which takes effect immediately.

The funnel counter is not consent-gated, because it is the narrow case European regulators treat as exempt: first-party, used only by us for aggregate audience measurement, never shared, never combined with anything from another site, and never used to target you. If you would rather it did not exist, clearing cookies removes it and nothing about the product stops working. It is also the only reason we can tell whether the free check is worth running at all.

You can block or clear any of these in your browser; signing in will stop working if you block the authentication cookies.

The askwords tag is the small script you can add to your own website to see how many visits arrive from AI assistants. It was built to be the least invasive thing that could answer that question.

• It sets no cookies, and writes nothing persistent to a visitor’s browser beyond a single session flag that stops it reporting the same source twice.
• It sends no IP address, no user-agent profile, no visitor or device identifier, and no personal data of any kind.
• Each event carries only your brand id, the name of the referring source (for example “chatgpt”), the landing path, and the time.
• It reports at most once per source per browser session, and stays silent on ordinary search visits unless you switch search sources on yourself.

For this data you are the controller and we are your processor: we handle it on your instructions, only to produce your traffic reporting, and we use it for nothing else. Remove the script from your site and the reporting stops; delete the brand and the events are deleted with it.

Because the tag collects no personal data, it does not by itself require you to obtain consent from your visitors. Your own privacy notice, and your own legal advice, govern what you must tell them. See also the tag section of the Terms of Service. (Section numbers run per document, so we link across rather than cite a number.)

We do not sell or rent personal data, and we do not share it with advertisers. We share it only with the service providers that make the product run, each under a contract limiting them to processing it on our instructions:

Beyond those, we disclose personal data only when:

• the law requires it, or we receive a valid legal request, which we review, and narrow or challenge where we can;
• it is necessary to establish, exercise or defend legal claims, or to investigate abuse of the service;
• the business is involved in a merger, acquisition or sale of assets, in which case we will tell you before your data becomes subject to a different privacy policy, and the buyer is bound by the commitments here until then.

We are a small operation running on mainstream infrastructure, and most of that infrastructure is in the United States. If you are in the EEA, the UK or Switzerland, your personal data will be transferred outside your country.

Where a provider is not covered by an adequacy decision, those transfers are made under the European Commission’s Standard Contractual Clauses, with the UK Addendum where the UK GDPR applies, together with the technical measures described in §14. Ask us and we will tell you which safeguards apply to a particular provider.

We keep personal data only as long as it serves the purpose it was collected for, or as long as the law requires.

When a retention period ends, data is deleted or irreversibly aggregated so that it can no longer be linked to you.

Depending on where you live, you have some or all of the following rights over your personal data. We honour them for everyone, wherever you are, rather than checking your jurisdiction first.

How to exercise them: email privacy@askwords.ai from the address on your account. We respond within 30 days, and will tell you if we need the extension the law allows. We do not charge for a request, and we will not treat you differently for making one. Where we cannot identify you from the request itself, we may need something that links you to the account.

Complaints: if you are in the EEA, the UK or Switzerland and you think we have got this wrong, you can lodge a complaint with your local supervisory authority. We would rather you told us first at privacy@askwords.ai, but that is your right and it is not conditional on talking to us.

If you are a California resident, the CCPA as amended by the CPRA gives you specific rights, and requires us to say the following in plain terms.

In the last twelve months we have collected the categories of personal information described in §3: identifiers (email address, IP address), commercial information (subscription and transaction records), internet activity (your interaction with our service), and the content of communications you send us. The sources, purposes and recipients are those set out in §4 and §9.

We have not sold personal information, and we have not shared it for cross-context behavioral advertising. We do not do either of those things and have no plans to. We do not knowingly sell or share the personal information of anyone under 16.

You have the right to know what we collect, to request deletion, to request correction, to opt out of sale or sharing (there is nothing to opt out of), and not to be discriminated against for exercising any of them. An authorized agent may make a request on your behalf with proof of authorization. Send any of these to privacy@askwords.ai.

Data is encrypted in transit with TLS and at rest by our database and hosting providers. Access to production data is limited to the people who need it, and API credentials are held as secrets rather than in code. Sign-in is passwordless, so there is no password database to breach. Payment card details never touch our servers. Our payment provider collects them directly.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal data and is likely to result in a risk to your rights, we will notify the relevant supervisory authority and you, without undue delay and within the timeframes the law sets.

askwords.ai is a business tool, is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, write to privacy@askwords.ai and we will delete it.

Anyone can run a free check on any public brand or business name, and the results reflect what public AI systems answer, not private data about a company or a person.

A share link you create contains only the brand name, the score, and the per-engine results you chose to share. It carries no account details and no email address. Treat the link as public: anyone who has it can open it. Ask us to revoke one at any time.

We update this policy when the product changes: a new sub-processor, a new answer engine, a new category of data. The date at the top always reflects the current version, and this one was last updated on 7 September 2026.

For material changes we will give notice before they take effect: by email to account holders, or by a prominent notice on the site. Continuing to use askwords.ai after a change takes effect means you accept the updated policy; if you do not, you can delete your account and your data.

Privacy and data protection requests: privacy@askwords.ai.

Everything else: support@askwords.ai, or the contact form.

We answer privacy mail ourselves, not through a ticket queue, and we aim to reply well inside the 30 days the law allows.