Privacy Policy

Ask The AI Council ("the Service", "we", "us"). Effective June 8, 2026.

1 · Who we are & scope

This Privacy Policy explains what information Ask The AI Council collects, how we use and protect it, and your choices. It applies to asktheaicouncil.com and the Service. By using the Service you agree to this Policy and to our Terms of Use.

2 · Information we collect

Account information — your email and authentication details when you sign up.
Business information you provide — your intake answers, business name/industry/description, documents you upload, and the questions you bring to the council.
Connected-account data — when you choose to connect a third-party tool (e.g. Shopify, Stripe, Square, TikTok Shop, QuickBooks, bank via Plaid), we access read-only business data such as orders, products, payments, revenue, and performance metrics, strictly to ground the council's analysis for you.
Payment information — handled by Stripe; we do not store your full card number. We retain a Stripe customer reference and your plan/subscription status.
Usage & device data — first-party analytics (pages viewed, features used, approximate engagement) to operate and improve the Service.

3 · How we use your information

To provide and personalize the Service; to let the AI council analyze your business and produce summaries, tasks, goals, and reports for you; to process subscriptions and billing; to maintain security and prevent abuse; to provide support; and to improve the Service. We use your data to serve you — we do not sell your personal information or your connected-account data.

4 · Connected accounts & social media (Shopify, Stripe, Plaid, and TikTok, Instagram, YouTube, LinkedIn, Facebook)

When you authorize a connection, we access only the data needed to provide your analysis, on a read-only basis, and only for as long as you keep the source connected. Access tokens and credentials are encrypted at rest (AES-GCM) and are accessible only to our secure server processes — they are never returned to the browser. We do not use connected-platform data for advertising, do not share it with other users, and do not sell it. You can disconnect any source and request deletion of what it stored at any time, which revokes our access and removes the stored credential.

Social media connections. If you choose to connect a social account — TikTok, Instagram, YouTube, LinkedIn, or Facebook — through our provider Ayrshare, we access, on a read-only basis, your public profile, your recent posts/videos, and engagement and analytics metrics (such as views, likes, comments, and follower counts), solely so the council can review your content and growth and answer your questions. We do not post on your behalf without your explicit action. Your TikTok and other platform data is used only to provide your review — it is never sold, shared with other users, or used for advertising — and we handle it in accordance with each platform's developer terms, including the TikTok Developer Terms of Service and Community Guidelines. You can disconnect any social account at any time, which revokes our access and deletes the stored connection.

5 · AI processing

To generate the council's responses, the business context you provide is sent to third-party AI model providers (which may include Anthropic, OpenAI, Google, and xAI) and, for voice features, a speech provider. These providers process the content to return a response and act as our processors; we do not permit them to use your content to train their models where such controls are available.

6 · Service providers / sub-processors

We rely on trusted vendors to run the Service, including: Supabase (database, authentication, and serverless functions), Vercel (web hosting), Stripe (payments), the AI/voice providers noted above, LiveKit (live video sessions), Ayrshare (connecting your social accounts and reading your posts and analytics), Cloudflare (image generation), and an email provider for transactional messages. Each processes data only to provide their service to us.

7 · How we protect your data

Data is encrypted in transit (HTTPS). Sensitive credentials for connected accounts are encrypted at rest with AES-GCM and stored separately with server-only access (row-level security and service-role isolation). Access is limited to what is needed to operate the Service. No method of transmission or storage is 100% secure, but we work to protect your information.

8 · Data retention

We keep your account and business data while your account is active. Connected-account credentials are kept until you disconnect the source. You may request deletion of your data or close your account, after which we delete or de-identify your data within a reasonable period, except where we must retain limited records to meet legal, tax, or security obligations.

9 · Your rights & choices

You can access and update your information in the app, disconnect any data source, and request access, correction, or deletion of your personal data by contacting us. Depending on your location, you may have additional rights under laws such as the GDPR or CCPA, including the right to deletion and to object to certain processing. We do not sell personal information.

10 · Cookies & analytics

We use essential cookies/local storage to keep you signed in and first-party analytics to understand and improve usage. We do not use third-party advertising trackers.

11 · Children

The Service is for business use by adults and is not directed to children under 16. We do not knowingly collect data from children.

12 · International transfers

We may process and store data in the United States and other countries. Where required, we use appropriate safeguards for international transfers.

13 · Changes to this Policy

We may update this Policy; we will revise the effective date above and, for material changes, provide notice. Continued use after changes means you accept the updated Policy.

14 · Contact

Questions or privacy requests: support@asktheaicouncil.com.

This Policy is provided for transparency and does not constitute legal advice. See also our Terms of Use and AI Notice & Disclaimer.