Privacy Policy

1. Data Controller

AskAjay.ai is operated by AI Exponent LLC, a Wyoming limited liability company, with its registered office at 30 N Gould St, #61306, Sheridan, WY 82801, USA. AI Exponent LLC is the data controller for personal data collected through askajay.ai and its related products and services. For any privacy-related request, contact [email protected].

2. Overview

We respect your privacy. This policy explains what personal data we collect, how we use it, how we protect it, and what rights you have. It applies to your use of askajay.ai and any AI Exponent LLC product or service that links to this policy.

3. Information We Collect

We collect personal data that you provide directly when you:

• Subscribe to The Brief newsletter (email address, optional name)
• Submit a contact form (name, email, company, message)
• Join a course waitlist or enrol in a course (name, email, payment details processed by Stripe)
• Take the AI Readiness Canvas (your 15 self-reported answers and any email you optionally provide for your report)
• Use the Situation Room (your queries and session metadata)

We also collect limited technical data automatically through Plausible Analytics, a cookie-free, GDPR-compliant analytics tool that records aggregate, anonymised page-view and referrer data. No personal identifiers or tracking cookies are set by Plausible.

4. How We Use Your Information

We use your personal data to:

• Deliver newsletters you have subscribed to
• Respond to contact form inquiries and service requests
• Generate your Canvas diagnostic report and, where applicable, send the report to the email address you provided
• Deliver Situation Room responses and improve our knowledge base
• Notify you of course openings you have waitlisted for
• Fulfil our legal, accounting, tax, and security obligations
• Protect against fraud, abuse, and security incidents

5. Legal Bases (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Consent: newsletter subscription, optional Canvas email capture
• Contract: delivering a paid product, course, or engagement you purchased
• Legitimate interests: responding to your inquiries, improving our services, securing our systems, and pursuing our business interests in a way that does not override your rights
• Legal obligation: tax, accounting, and regulatory compliance

6. Third-Party Services

We rely on the following providers to operate our services. Each is bound by its own privacy terms and, where applicable, a data processing agreement with us:

• Vercel: website hosting (USA)
• Supabase: database and storage for Canvas assessments and Situation Room session data (USA)
• Sanity.io: content management for published articles (USA)
• Resend: newsletter and transactional email delivery (USA)
• Clerk: authentication, SOC 2 compliant (USA)
• Stripe: payment processing for paid products; PCI-DSS compliant (USA, global)
• Plausible Analytics: cookie-free, privacy-preserving website analytics (EU)
• Anthropic, OpenAI, or other LLM providers: generating AI-powered outputs for Situation Room and Canvas reports. Queries may be processed by these providers under their respective enterprise zero-retention agreements.

7. Cookies

We do not use marketing or tracking cookies. Our analytics provider (Plausible) is cookie-free. However, the following strictly necessary cookies may be set by third-party services when you use specific features:

• Clerk: authentication session cookies when you sign in
• Stripe: fraud prevention and payment session cookies during checkout

These cookies are essential to operate the features you have requested and cannot be disabled without affecting those features.

8. International Data Transfers

AI Exponent LLC is based in the United States, and most of our infrastructure providers are US-based. If you access our services from outside the United States, your personal data will be transferred to, stored in, and processed in the USA. Where we transfer data from the European Economic Area, United Kingdom, or Switzerland, we rely on Standard Contractual Clauses or equivalent safeguards approved by applicable regulators.

9. Data Retention

We retain personal data only as long as necessary:

• Newsletter subscribers: until you unsubscribe, then purged within 30 days
• Contact form submissions: up to 24 months for follow-up and record-keeping
• Canvas assessments: up to 36 months to allow you to access your report and to improve our scoring model
• Situation Room session data: up to 12 months for product improvement and abuse prevention, then anonymised or deleted
• Paid course enrolments: duration of the course plus 7 years for tax and accounting purposes

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your personal data, subject to legal retention obligations
• Restriction: ask us to pause processing while we resolve a dispute
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests or direct marketing
• Withdraw consent: at any time, without affecting the lawfulness of prior processing
• Lodge a complaint: with your local data protection authority

To exercise any of these rights, email [email protected]. We will respond within 30 days.

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you additional rights:

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information we have collected from you
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing: we do not sell or share your personal information for cross-context behavioural advertising
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, email [email protected]. We will verify your identity before responding.

12. Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

13. Security

We use commercially reasonable technical and organisational measures to protect your personal data, including encrypted connections (TLS), access controls, and SOC 2-compliant authentication via Clerk. No system is perfectly secure, and we cannot guarantee absolute security.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by an updated "Last updated" date and, where appropriate, by notice to active users.

15. Contact

For privacy questions or to exercise any of your rights, email [email protected].

AI Exponent LLC
30 N Gould St, #61306
Sheridan, WY 82801, USA