Privacy Policy

1. Introduction

askRIA ("we", "us", "our") operates the website www.askria.ai and the askRIA platform (collectively, the "Service"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered fundraising and financial intelligence platform.

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

When you create an account, subscribe to our Service, or contact us, we may collect the following personal information:

• Full name
• Email address
• Phone number
• Company name and job title
• Business address
• Payment and billing information (processed securely through our third-party payment provider)

2.2 Account Data

We collect information related to your account activity, including your account preferences, subscription plan, feature usage, saved searches, generated reports, and any configurations you set within the platform.

2.3 Usage Data

We automatically collect certain information when you access the Service, including:

• IP address and approximate geolocation
• Browser type and version
• Operating system
• Pages visited and features used
• Timestamps of access and session duration
• Referring URLs and exit pages
• Device identifiers

2.4 Financial Documents

As part of the core functionality of the askRIA platform, you may upload financial documents including pitch decks, financial statements, cap tables, investor reports, and other business-related materials. These documents are processed by our AI systems to provide you with insights, analysis, and intelligence. We treat all uploaded documents as strictly confidential.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service, including AI-driven analysis of your uploaded documents
• To improve and personalise your experience on the platform
• To analyse usage patterns and trends to enhance the functionality and performance of the Service
• To develop new features, products, and services
• To communicate with you, including responding to enquiries, providing customer support, and sending service-related notices
• To send you updates, newsletters, marketing materials, and other information that may be of interest to you (you may opt out at any time)
• To detect, prevent, and address fraud, security issues, and technical problems
• To comply with applicable legal obligations, regulations, and lawful requests

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data on the following legal bases:

• Consent: Where you have given us explicit consent to process your personal data for a specific purpose, such as receiving marketing communications.
• Contract Performance: Processing is necessary for the performance of a contract with you, including providing access to the Service and fulfilling your subscription.
• Legitimate Interests: Processing is necessary for our legitimate interests, such as improving the Service, ensuring security, and conducting analytics, provided these interests are not overridden by your rights.
• Legal Obligation: Processing is necessary to comply with a legal obligation to which we are subject.

5. Data Sharing

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

5.1 Service Providers

We engage trusted third-party service providers to assist us in operating the Service, including cloud hosting and infrastructure providers, analytics services, payment processors, and email delivery platforms. These providers access your data only to perform tasks on our behalf and are contractually bound by data processing agreements that require them to protect your information and use it solely for the purposes we specify.

5.2 Legal Requirements

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities, including courts, regulators, or law enforcement agencies. We may also disclose information where we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.

5.3 Business Transfers

In the event of a merger, acquisition, reorganisation, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service of any change in ownership or uses of your personal data, as well as any choices you may have regarding your personal data.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account data is retained for as long as your account remains active. Following account termination or deletion, we retain account data for a period of 12 months to comply with legal obligations and resolve any disputes, after which it is securely deleted.
• Financial documents uploaded to the platform are retained in accordance with your account settings. You may delete your uploaded documents at any time through the platform. Upon account termination, documents are deleted in accordance with your retention settings or within 90 days, whichever comes first.
• Usage data is retained in anonymised or aggregated form for analytics purposes and is not linked to your identity after account deletion.

7. Your Rights Under the GDPR

If you are located in the EEA or the UK, you have the following rights with respect to your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request the deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at hello@askria.ai. We will respond to your request within 30 days. In certain cases, we may ask you to verify your identity before we can act on your request.

8. Your Rights Under the CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: You have the right to know what personal data we have collected about you, the categories of sources from which it was collected, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request the deletion of your personal data, subject to certain exceptions provided by law.
• Right to Opt Out of Sale: We do not sell your personal data. As such, there is no need to opt out of data sales.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing or a different quality of service for making a request.

To submit a CCPA request, please contact us at hello@askria.ai.

9. Cookies

We use cookies and similar tracking technologies to collect usage data and improve the Service. Cookies are small data files stored on your device that help us remember your preferences, understand how you use the Service, and deliver relevant content.

For detailed information about the cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookies Policy.

10. Data Security

We take the security of your data seriously and implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our security practices include:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• SOC 2 security practices and controls across our infrastructure
• Regular security audits and vulnerability assessments conducted by independent third parties
• Access controls and authentication mechanisms to restrict data access to authorised personnel only
• Continuous monitoring and logging of access to sensitive systems and data

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incident in accordance with applicable notification obligations.

11. Children's Privacy

The Service is not directed at individuals under the age of 13, and we do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete such information as quickly as possible. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at hello@askria.ai so that we can take appropriate action.

12. International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area. Where we transfer your data internationally, we ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws. These safeguards may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner's Office
• Transfers to countries that have been deemed to provide an adequate level of data protection
• Binding corporate rules or other legally recognised transfer mechanisms

You may request further information about the safeguards we have in place by contacting us at hello@askria.ai.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated Privacy Policy on this page with a revised "Last updated" date. Where required by applicable law, we will also notify you via email or through a prominent notice on the Service prior to the changes becoming effective.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: hello@askria.ai
• Address: 9b The Broadway, Woodford Green, England, IG8 0HL