AskKepler.ai Privacy Policy

This Privacy Policy (“Policy”) applies to AskKepler.ai and is operated by Ask Kepler LLC (“Ask Kepler,” “we,” “us,” or “Company”). It describes how we collect, use, share, and protect your information when you use our AI platform for business data access and analysis (the “Services”) and when you visit our public website. By using the Services, you consent to the data practices described here.

AI-Specific Data Processing

The Services utilize artificial intelligence technologies accessed through secure third-party APIs. Files you upload are parsed entirely in your browser via JavaScript and sent directly in the API payload — they are never stored on our servers or in our database. Conversation text, project data, and AI-generated outputs are stored securely but are never used to train any AI models, and are never shared with advertising partners.

1. Information We Collect

We collect the following categories of information:

Account Information: First and last name, email address, employer, job title, and industry/sector.
Usage and Project Data: Projects, conversations, prompts, uploaded files (processed client-side), and AI-generated outputs.
Payment Information: Billing details processed by our payment processor, Stripe (we do not store full credit card numbers).
Technical and Website Data: IP address, browser type, device information, usage logs, and — on our public website — online identifiers and page-activity data collected through cookies and similar technologies (see Section 7).

We do not collect personal information unless you voluntarily provide it, it is necessary to provide the Services, or it is collected automatically through standard website technologies as described in Section 7.

2. How We Use Your Information

We use your information to:

Operate and deliver the Services you request.
Provide customer support and respond to your communications.
Process payments and manage your account.
Maintain the security of the Services and prevent fraud.
Comply with legal obligations.
Improve and develop the Services (using only de-identified or aggregated data where possible).
Measure and improve the performance of our own marketing (using website-visitor data only — never your account or project content).

We do not use the content you place in the Services — your projects, conversations, prompts, uploaded files, or AI-generated outputs — for marketing, advertising, or model training, and we do not share that content with advertisers or use it to send you third-party promotions. Separately, like most websites, we use limited information about visitors to our public website (such as pages viewed and online identifiers) to understand and improve how our own marketing performs, including through advertising partners as described in Sections 3 and 7. You can opt out of this at any time through the Your Privacy Choices link in our website footer.

3. Sharing Your Information

We do not sell the personal information or project data you place in the Services in exchange for money, and we never share your projects, conversations, prompts, uploaded files, or AI-generated outputs with advertising partners or use them to train AI models. That content belongs to you.

We share information only in these limited situations:

Service providers — trusted vendors who process data on our behalf and only on our instructions, such as our cloud hosting and infrastructure provider (Amazon Web Services) and our payment processor (Stripe). They are contractually obligated to protect your data and use it only to provide services to us.
Advertising and marketing-measurement partners — to understand how our marketing performs, our public website uses the LinkedIn Insight Tag, which shares limited website-visitor information (such as online/device identifiers and pages visited) with LinkedIn. Under the California and Colorado privacy laws, this kind of disclosure for cross-context behavioral advertising may be considered a “sale” or “share” of personal information, even though we receive no money for it. This applies only to public-website visitor data — never to your account or project content. You can opt out at any time through the Your Privacy Choices link in our footer, and we honor Global Privacy Control browser signals as an opt-out (see Sections 4 and 7).
To comply with law, court orders, or governmental requests.
To protect the rights, property, or safety of Ask Kepler, our users, or the public.
In the event of a merger, acquisition, or sale of assets (with appropriate protections).

4. Your Privacy Rights (Colorado Privacy Act, California Privacy Rights Act & Other Laws)

Depending on where you live, the Colorado Privacy Act (CPA), the California Privacy Rights Act (CPRA), and similar state laws may give you the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your personal information (subject to legal exceptions).
Opt out of targeted (cross-context behavioral) advertising and of any related “sale” or “share” of your personal information.

You can exercise the advertising opt-out immediately, without contacting us, using the Your Privacy Choices link in our website footer. We also automatically honor the Global Privacy Control (GPC) browser signal as a valid opt-out request.

To exercise your access, correction, or deletion rights, reach out to us via our contact form, selecting “Legal” as the category. We will respond within the time required by applicable law. You may also appeal any decision through the same form. We will not discriminate against you for exercising any of these rights.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards. All data is transmitted using TLS/HTTPS encryption. Database information is encrypted at rest (AES-256 via AWS RDS). Projects and conversations are isolated and private to your account.

6. Data Retention

We retain your information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and for legitimate internal business purposes such as analytics, churn rate reporting, fraud prevention, and service improvement.

When you delete a project or conversation, we use a soft-delete process: the item is removed from your view and no longer associated with your active account, but we may retain de-identified or aggregated data derived from it for internal analytics and business intelligence purposes. Upon cancellation of your subscription or deletion of your account, we will delete or de-identify your personal information where feasible. However, we may continue to retain de-identified or aggregated data indefinitely for statistical, analytical, and business intelligence purposes. This de-identified data cannot reasonably be linked back to you.

If you make a verifiable deletion request under applicable privacy laws, we will delete or anonymize your personal information as required, subject to the exceptions noted in Section 4 above.

7. Cookies and Tracking Technologies

We use a small number of cookies and similar technologies, in two categories:

Strictly necessary — a session cookie (for example, PHPSESSID) that keeps you signed in and protects our forms. The Services cannot function without these, so they are always active and are not used for advertising.
Advertising and marketing measurement — the LinkedIn Insight Tag, described in Section 3, which helps us understand how our marketing campaigns perform. These are optional.

You can opt out of the advertising and marketing-measurement technologies at any time using the Your Privacy Choices link in our website footer, and we honor the Global Privacy Control (GPC) signal automatically. You can also manage cookies through your browser settings. Opting out does not affect the strictly necessary cookies, which are required to operate the Services.

8. Children Under 13

We do not knowingly collect personal information from children under the age of 13. If you are under 18, you may use the Services only with permission from a parent or guardian.

9. International Users

The Services are hosted in the United States and are intended for users in the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the United States. Our advertising and marketing-measurement practices described above follow the United States notice-and-opt-out model and are not intended to serve as a basis for consent under the EU/UK GDPR or ePrivacy rules.