Privacy Policy

Huzefa Aliasger, sole proprietor, trading as AskYourMarket, based in Sri Lanka, is the data controller for personal data processed through this service. Contact: hezefaaliasger53@gmail.com.

• Account data — your email address and authentication credentials. Used to create and secure your account, sign you in, and send service and password emails. Legal basis: performance of our contract with you.
• Study content — audience descriptions, questionnaires, study titles and any other text you enter. Used to generate synthetic respondents and results and to show your studies back to you. Legal basis: performance of our contract.
• Generated study data — synthetic respondent profiles, responses and reports produced for your studies. These describe fictional, AI-generated people, not real individuals, but they are stored against your account. Legal basis: performance of our contract.
• Billing records — plan, subscription status, credit balance and transaction references. Card and payment details are collected and held by Paddle, not by us. Legal basis: contract and legal obligation.
• Support messages — anything you send us by email. Used to answer you. Legal basis: legitimate interest in supporting our customers.
• Technical and usage data — IP address, device and browser information, error reports and aggregate page analytics. Used for security, abuse and fraud prevention, and to improve the product. Legal basis: legitimate interests.

We do not sell personal data, and we do not use your study content to train our own models.

• Paddle.com — our Merchant of Record. Paddle processes payments, subscriptions, invoicing, sales tax compliance and order-related support, and acts as an independent controller for that activity under its own privacy notice.
• Supabase — database, authentication and file storage hosting for accounts, studies and generated data.
• Our AI model provider — the large language model service that generates synthetic respondents, responses and reports. Audience descriptions and questionnaire text are sent to this provider to produce your results. We do not send your email address or billing details.
• Hosting and analytics providers — application hosting and privacy-conscious, aggregate traffic analytics.
• Professional advisers and authorities — where required for legal, accounting or regulatory reasons.

These providers operate outside Sri Lanka, including in the EU and the United States. Where data is transferred internationally, we rely on the providers’ standard contractual clauses and equivalent safeguards.

• Account and billing records are kept for as long as your account is open, and for up to seven years afterwards where tax or accounting law requires it.
• Studies are kept while your account is open. Completed and reported studies are put through our automated archival process: raw synthetic respondent and response rows are removed from the live database after the configured retention window, while your report and summary remain available.
• When you delete a study it is removed from the live database. When you close your account we delete or anonymise your personal data within 30 days, apart from records we must legally retain.

Subject to applicable law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format, and you may withdraw consent where we rely on it. Email hezefaaliasger53@gmail.com and we will respond within 30 days. If you are in the UK or EEA you also have the right to complain to your local supervisory authority.

We use strictly necessary cookies and local browser storage to keep you signed in and to remember your session preference; the platform does not work without them. We also use privacy-conscious, aggregate analytics to count page visits. We do not run advertising or cross-site tracking cookies. You can clear or block cookies in your browser settings, though doing so will sign you out.

Data is encrypted in transit, access to the database is restricted by row-level security so that you can only read your own records, and administrative keys are held server-side only. No system is perfectly secure, but we take appropriate technical and organisational measures to protect your information.

We will update this notice when our processing changes and will revise the date at the top of the page. Questions or requests: hezefaaliasger53@gmail.com.