1. Data controller
Ask My Book — contact: contact@askmybook.com
2. Data we collect
- Account: email, username, password (hashed).
- Documents: files you upload for AI analysis (stored securely).
- Payment: billing details processed by Stripe; card data never touches our servers.
- Usage: token consumption, conversation history.
3. Purpose & legal basis
- Providing the Ask My Book service (contract).
- Billing and legal compliance (legal obligation).
- Security and fraud prevention (legitimate interest).
4. Processors
Stripe (payments), AWS (hosting), OpenAI (AI processing). Data processing agreements are in place with subprocessors where required.
5. Retention
- Account data: for the life of your account plus applicable legal retention.
- Invoices: as required by tax law (typically 5–7 years in the UAE).
- Uploaded documents: until you delete them or close your account.
6. Your rights (UAE PDPL)
You may request access, correction, deletion, or restriction of your personal data. Contact contact@askmybook.com. You may also lodge a complaint with the UAE Office of Data Protection if applicable.
7. Cookies & storage
We use localStorage for authentication (JWT) and theme preferences. No advertising cookies are used.
8. Terms
See our Terms of Service.
9. Jurisdiction
This policy is operated from the United Arab Emirates.