AskKepler.ai Privacy Policy

This Privacy Policy (“Policy”) applies to AskKepler.ai and is operated by Ask Kepler LLC (“Ask Kepler,” “we,” “us,” or “Company”). It describes how we collect, use, share, and protect your information when you use our AI platform for business data access and analysis (the “Services”). By using the Services, you consent to the data practices described here.

AI-Specific Data Processing

The Services utilize artificial intelligence technologies accessed through secure third-party APIs. Files you upload are parsed entirely in your browser via JavaScript and sent directly in the API payload — they are never stored on our servers or in our database. Conversation text, project data, and AI-generated outputs are stored securely but are never used to train any AI models.

1. Information We Collect

We collect the following categories of information:

• Account Information: First and last name, email address, employer, job title, and industry/sector.
• Usage and Project Data: Projects, conversations, prompts, uploaded files (processed client-side), and AI-generated outputs.
• Payment Information: Billing details (we do not store full credit card numbers).
• Technical Data: IP address, browser type, device information, and usage logs.

We do not collect personal information unless you voluntarily provide it or it is necessary to provide the Services.

2. How We Use Your Information

We use your information to:

• Operate and deliver the Services you request.
• Provide customer support and respond to your communications.
• Process payments and manage your account.
• Maintain the security of the Services and prevent fraud.
• Comply with legal obligations.
• Improve and develop the Services (using only de-identified or aggregated data where possible).

We do not use your personal information or project data for marketing purposes or to send promotional emails from third parties.

3. Sharing Your Information

We do not sell, rent, or lease your personal information or project data to third parties for any commercial purpose.

We may share information only in these limited situations:

• With trusted service providers (e.g., hosting, payment processors, analytics) who are contractually obligated to protect your data and use it only on our behalf.
• To comply with law, court orders, or governmental requests.
• To protect the rights, property, or safety of Ask Kepler, our users, or the public.
• In the event of a merger, acquisition, or sale of assets (with appropriate protections).

4. Your Privacy Rights (Colorado Privacy Act & Other Laws)

Under the Colorado Privacy Act (CPA) and similar laws, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your personal information (subject to legal exceptions).

To exercise these rights, email us at legal@askkepler.ai. We will respond within the time required by applicable law. You may also appeal any decision by contacting us at the same address.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards. All data is transmitted using TLS/HTTPS encryption. Database information is encrypted at rest (AES-256 via AWS RDS). Projects and conversations are isolated and private to your account.

6. Data Retention

We retain your information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and for legitimate internal business purposes such as analytics, churn rate reporting, fraud prevention, and service improvement.

When you delete a project or conversation, we use a soft-delete process: the item is removed from your view and no longer associated with your active account, but we may retain de-identified or aggregated data derived from it for internal analytics and business intelligence purposes. Upon cancellation of your subscription or deletion of your account, we will delete or de-identify your personal information where feasible. However, we may continue to retain de-identified or aggregated data indefinitely for statistical, analytical, and business intelligence purposes. This de-identified data cannot reasonably be linked back to you.

If you make a verifiable deletion request under applicable privacy laws, we will delete or anonymize your personal information as required, subject to the exceptions noted in Section 4 above.

7. Cookies and Tracking Technologies

We may use cookies and similar technologies to operate the Services, analyze usage, and improve performance. You can manage cookie preferences through your browser settings.

8. Children Under 13

We do not knowingly collect personal information from children under the age of 13. If you are under 18, you may use the Services only with permission from a parent or guardian.

9. International Users

The Services are hosted in the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the United States.

10. Changes to This Policy

We may update this Policy from time to time. Your continued use of the Services after changes constitutes your acceptance of the updated Policy.