Privacy Policy
At Askflot, we build smart conversational forms that turn natural language answers into clean, structured data. Your data and your respondents' data belong 100% to you. We never use your conversations to train public AI models, we operate zero ad networks, and you can export or permanently delete your entire dataset at any time.
1. Who We Are and Scope
This Privacy Policy governs the use of the Askflot platform (accessible at askflot.com and its associated subdomains), provided to offer a software infrastructure for conversational data collection and AI-augmented insights.
Under the General Data Protection Regulation (GDPR - EU Regulation 2016/679):
- For Account Creators (Users): Askflot acts as the Data Controller regarding authentication credentials, account management, and billing records.
- For Form Respondents: Askflot acts as a Data Processor acting solely on behalf of the Form Creator (the Data Controller).
2. Data We Collect
We adhere to strict data minimization principles:
Creator Account Data
Work email address, encrypted password (bcrypt), optional name/organization, unique secure session identifier, and billing history.
Respondent Conversational Data
Voluntarily submitted text or voice messages, validated attributes extracted according to the schema defined by the creator (text fields, numbers, currencies, choices).
Sensitive Data Exclusion
Our SecurityGuard module automatically blocks the extraction of health data, political opinions, religious beliefs, or unauthorized government identifiers.
Technical Metadata
Timestamps, completion status, and anonymized IP addresses used for completion rate metrics and DDoS prevention.
3. Artificial Intelligence and Zero-Training Guarantee
Large Language Models (LLMs) used by Askflot operate exclusively as deterministic real-time inference engines (named entity extraction and intent classification). No data entered into an Askflot form is ever used to train, fine-tune, or retrain public or third-party AI models (OpenAI, Anthropic, or open-source models).
Inference API calls are governed by Enterprise Zero Data Retention agreements guaranteeing immediate discard of processing payloads once the structured response is returned.
4. Purposes and Legal Bases for Processing
Processing is carried out on the following legal bases:
- Contract Performance (Art. 6.1.b GDPR): Delivering conversational forms, hosting databases, displaying submissions, and enabling CSV/JSON exports.
- Explicit Consent (Art. 6.1.a GDPR): Respondent consent obtained prior to voluntary submission within the conversation interface.
- Legitimate Interest (Art. 6.1.f GDPR): Protecting infrastructure against fraud, abuse, and prompt injection attacks.
5. Data Retention and Cascading Deletion
We enforce atomic cascading deletion:
- When a creator deletes an individual response, all verbatims and associated extracted data are permanently purged from relational databases.
- When a creator deletes a form or closes their account, all associated conversations, submissions, insight metrics, and logs are destroyed immediately and irreversibly.
- Encrypted technical backups are overwritten on a rolling cycle of up to 30 days.
6. Your Rights (GDPR & Privacy)
In accordance with applicable privacy laws and regulations, you are entitled to the following rights:
Instant export of all forms and submissions in open standard CSV and JSON formats.
Unconditional deletion of your account data and response databases upon request.
Edit responses directly on the review card before final submission or via the dashboard.
Right to lodge a complaint with your competent supervisory authority (such as CNIL or ICO).
7. Infrastructure Security
All communications between your users and our servers are protected by end-to-end TLS 1.3 encryption. Databases are encrypted at rest (AES-256) and hosted in ISO 27001 and SOC 2 certified data centers located in the European Union.
8. Contact & Data Protection Officer (DPO)
To exercise your rights or if you have any questions regarding how your data is handled:
Askflot — Data Privacy Officer
Email: privacy@askflot.com
Average response time: within 24 to 48 business hours.