Transparent & GDPR-Compliant

Privacy Policy

Last Updated: October 15, 2026. This Privacy Policy explains how AskGPT ("we", "our", or "us") collects, uses, protects, and discloses your personal information when you use our website, dashboard, and AI chatbot services.

1. Introduction

Welcome to AskGPT (accessible at https://askgpt.in). We provide no-code AI customer service chatbots and conversational tools for businesses worldwide. We are deeply committed to respecting and protecting the privacy of our website visitors, registered workspace owners, team members, and the end-users who interact with AskGPT-powered widgets.

2. Google OAuth User Data & Limited Use Policy

When you choose to register or sign in to AskGPT using "Continue with Google", we request permission to access your Google account via standard OAuth 2.0 authentication protocols.

a. What Google Data We Collect:

Basic Profile Information: Your full name and avatar/profile picture.
Email Address: Your primary verified Google account email address.
Unique Google User Identifier (Google ID): A persistent unique token to identify and authenticate your account.

b. How We Use Google User Data:

To securely log you into your AskGPT customer dashboard without requiring a separate password.
To associate your account with your organization workspace and chatbot configurations.
To send essential transactional notifications (such as subscription confirmations, security alerts, and customer support replies).

Google Limited Use Affirmation: AskGPT's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We never sell your Google user data, and we do not share your personal information with third-party advertising networks or data brokers.

3. Information We Collect Directly

When creating an account or interacting with our platform, you may provide:

Contact & Profile Details: Full name, company/organization name, work email address, telephone number, country, and city.
Knowledge Base Sources: Content, PDFs, text, and website URLs you upload to train your custom chatbot.
Chat History & Inquiries: Messages, feedback, and transcripts exchanged between end-users and your deployed chatbot widgets.
Billing Information: Payment processing is handled by verified PCI-DSS compliant gateways (such as Dodo Payments and Razorpay). We never store raw credit/debit card numbers on our servers.

4. AI Processing & Enterprise Data Isolation

AskGPT uses enterprise AI language models (including OpenAI and Google Gemini APIs) to power intelligent conversational bots.

No Foundation Model Training: Your business documents, proprietary data, customer chats, and knowledge bases are strictly partitioned in multi-tenant PostgreSQL vector storage and are NEVER used to train, retrain, or improve public foundation models.
Strict Tenant Isolation: Every organization has isolated workspaces with row-level security and role-based access control.

5. Cookies & Local Storage

We use secure, HTTP-only authentication session cookies (`askgpt_customer_auth`, `askgpt_org_id`) to maintain your authenticated dashboard session across page refreshes. We also use standard Google Analytics (gtag.js) to understand general website traffic and improve user experience. You can disable cookies in your browser settings, though doing so may limit your ability to remain logged in.

6. Data Retention & Your Deletion Rights

You have full ownership of your data under applicable data protection regulations (including GDPR, CCPA, and Indian Digital Personal Data Protection Act):

Right to Access & Rectify: You can view and update your profile information, workspace name, country, and city anytime from your Account Settings.
Right to Deletion (Right to be Forgotten): You can delete your chatbots, documents, or your entire account directly from your dashboard, or by emailing privacy@askgpt.in. Upon account deletion, all associated data, vector embeddings, and Google auth references are permanently erased from our active databases within 30 days.

7. Security Standards

We implement industry-standard administrative, technical, and physical safeguards:

TLS 1.3 / HTTPS encryption for all data in transit across all endpoints.
AES-256 bit encryption at rest for customer databases and document storage.
Continuous monitoring, rate limiting, and automated intrusion prevention.

8. Contact Us

If you have any questions or concerns about this Privacy Policy, our data practices, or Google OAuth compliance, please reach out to our Data Protection Officer:

AskGPT Technologies
Email: privacy@askgpt.in / support@askgpt.in
Website: https://askgpt.in