Privacy Policy

This RightAsk AI Privacy Policy (this “Policy”) details the types of personal information that RightAsk AI LLC (“RightAsk,” “Company,” “we” and “our”) may collect, process, and/or disclose when you access, use, or sign up for an account on our website, www.rightask.ai and any corresponding subdomains (the “Site”), including all related widgets, tools, data, software, and other products or services provided by us (collectively together with the Site, the “Platform”), and our practices for processing that personal information. Please read this Policy carefully to understand our policies and practices regarding your personal information. By using or registering with our Platform, you acknowledge that your personal information will be collected, used, processed and disclosed as outlined in this Privacy Policy.

This Policy is subject to, and hereby incorporated by reference into, our Terms of Service available at https://rightask.ai/legal/terms-of-service.

Table of Contents

1.  Information We Collect

2.  How We Use Your Information

3.  Legal Basis for Processing (GDPR)

4.  How We Share Your Information

5.  Cookies & Tracking Technologies

6.  Data Retention

7.  Your Privacy Rights

8.  International Data Transfers

9.  Data Security

10.  Children's Privacy

11.  Third-Party Links & Services

12.  Changes to This Policy

13.  Contact Us

1.  Information We Collect

1.1  Information You Provide Directly

• Account registration details: name, email address, username, encrypted password

• Profile and business information: company name, role, billing address, telephone number, and other profile information you upload

• Payment information processed via Stripe (we do not store full card details), and related metadata including subscription tier, billing history, etc.

• Content and files you upload to the Platform, including intellectual property documents and agreements

• Communications with us, including support requests and correspondence, and AI assistant conversation logs

1.2  Information Collected Automatically

• IP address and approximate geolocation

• Browser type, version, and settings

• Device identifiers and session logs

• Device type and operating system

• Pages visited, clickstream data, and session duration, feature usage, platform interactions

• Referring URLs and exit pages

• Cookie identifiers and similar tracking technologies

1.3  Information from Third-Party Integrations

Where you connect third-party services to the Platform (e.g., Google Drive, Dropbox, DocuSign, Square, etc.), we may receive data from those services in accordance with their respective privacy policies and your authorization. We only access data necessary to provide the integration functionality you request.

1.4  AI Interactions

Conversations, prompts, and inputs submitted to the Platform’s AI assistant are transmitted to and processed by OpenAI on our behalf. RightAsk does not independently retain the content of those conversations, prompts, or inputs. Please do not submit sensitive personal data, such as financial account numbers, government-issued identification, or health information, through the Platform.

You are solely responsible for the content, data, and information you submit. RightAsk cannot monitor all files or prompts submitted and follows the applicable usage policies established by OpenAI. By using the Platform’s AI features, you acknowledge that your inputs will be processed by OpenAI subject to its privacy policy.

2.  How We Use Your Information

We use the information we collect for the following purposes:

• To create, maintain, and manage your account

• To provide, operate, and improve the Platform and its features

• To deliver AI-powered rights management, licensing, and lead capture features

• To enable contract and document execution workflows

• To process payments and manage subscriptions including billing through Stripe

• To provide AI-assisted functionality through OpenAI.

• To send transactional communications (e.g., receipts, password resets, service alerts)

• To send marketing communications where you have consented or where permitted by applicable law

• To analyze usage patterns and improve Platform performance and user experience

• To detect, prevent, and respond to fraud, abuse, or security incidents

• To enforce our Terms of Service and other agreements

• To comply with legal obligations and respond to lawful requests from authorities

3.  Legal Basis for Processing

RightAsk processes your personal data lawfully and only where we have a valid legal basis under Article 6 of the GDPR (and the UK GDPR, where applicable). The legal basis we rely on depends on the specific purpose for which we collect and use your data.

A single type of data may be processed under more than one legal basis depending on the context. The table below summarizes the main purposes and the corresponding legal basis:

You have the right to object to processing based on legitimate interests at any time. If you object, we will stop processing your data for that purpose unless we demonstrate compelling legitimate grounds that override your rights or the processing is required for the establishment, exercise, or defense of legal claims. You have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

4.  How We Share Your Information

4.1  Authorized Sub-Processors

We share information with trusted third-party service providers who assist in operating the Platform and who otherwise provide products and services used as integrations or features within the Platform. These third party providers are contractually obligated to protect your data and may only use it as directed by us. The following sub-processors are authorized as of the effective date of this Policy:

All authorized subprocessors listed above are located in the United States.

4.2  Legal Requirements

We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of RightAsk; (c) prevent fraud or address security issues; (d) protect the personal safety of users or the public; or (e) enforce our Terms of Service.

4.3  Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity. We will notify you via email or prominent notice on the Platform before your information becomes subject to a materially different privacy policy.

4.4  No Sale of Personal Data

RightAsk does not sell, rent, or trade your personal information to third parties for their independent marketing purposes.

5.  Cookies & Tracking Technologies

We use cookies and similar technologies to operate the Platform, remember your preferences, analyze usage, and support security. Categories include:

• Essential cookies: Required for the Platform to function (e.g., session management, authentication).

• Analytics cookies: Used to understand how users interact with the Platform.

• Preference cookies: Used to remember your settings and personalization choices.

• Marketing cookies: Used to deliver relevant promotional content, where permitted.

You may manage cookie preferences through your browser settings or through the cookie consent banner displayed on your first visit. Where required by law, we obtain your explicit consent before placing non-essential cookies.

5.1  Global Privacy Control (GPC)

We honor the Global Privacy Control (GPC) signal. If your browser transmits a GPC signal indicating a preference to opt out of the sale or sharing of personal information, we will treat this as a valid opt-out request consistent with applicable law, including the CCPA/CPRA. Note that RightAsk does not sell or share personal information as those terms are defined under the CCPA/CPRA.

6.  Data Retention

We retain personal data only for as long as necessary to provide and maintain the Platform, fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

At the end of the applicable retention period, we securely delete or anonymize personal data unless continued retention is required by law.

7.  Your Privacy Rights

7.1  All Users

Regardless of location, you have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; request deletion of your personal data, subject to legal obligations; and opt out of marketing communications at any time.

7.2  California Residents (CCPA/CPRA & Shine the Light)

To the extent applicable under law, California residents may have additional rights, including the right to know (categories and specifics), delete, correct, and opt out of the sale or sharing of personal information, the right to limit use and disclosure of sensitive personal information, and the right to appeal. We do not sell personal information. To submit a CCPA request, contact us at support@rightask.ai. We will respond within 45 days.

California's "Shine the Light" law permits California residents to request certain information regarding our disclosure of personal information to third parties for their own direct marketing purposes. However, we do not disclose personal information to third parties for their own direct marketing purposes.  If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us at legal@rightask.ai. Any such request must include "California Shine the Light Request" in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each calendar year.

We do not use or disclose sensitive personal information for purposes other than those necessary to provide the service, and we do not sell it.

If you choose to exercise your applicable rights, we won’t charge you different prices or provide you a different quality of services.

7.3  EEA & UK Residents (GDPR / UK GDPR)

a)    To the extent provided under the GDPR and UK GDPR, you have the following rights regarding your personal data:

                    i.     Right to Confirmation and Access - You may request confirmation whether RightAsk AI processes personal data concerning you and, if so, obtain a free copy of that data. You can also receive information about the purposes of processing, categories of data, recipients (including those in third countries), the envisaged storage period (or criteria used), your other rights, the source of the data (if not collected from you), and any automated decision-making (including meaningful information about the logic involved and its significance and consequences for you).

                   ii.     Right to Rectification - You may request that we correct inaccurate or incomplete personal data concerning you without undue delay.

                  iii.     Right to Erasure (“Right to be Forgotten”) - You may request deletion of your personal data without undue delay where one of the following applies: the data is no longer necessary for the purposes for which it was collected; you withdraw consent and no other legal basis applies; you object to the processing and there are no overriding legitimate grounds; the data has been unlawfully processed; or erasure is required by law.

                 iv.     Right to Restriction of Processing - You may request that we restrict processing of your personal data in certain circumstances (for example, while we verify its accuracy, if processing is unlawful and you prefer restriction over erasure, or while we assess your objection).

                  v.     Right to Object - You may object, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 6(1)(f)). We will stop processing unless we demonstrate compelling legitimate grounds that override your rights. You may also object to processing for direct marketing purposes at any time.

                 vi.     Right to Data Portability - Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may receive the personal data you provided to us in a structured, commonly used, machine-readable format and transmit it to another controller without hindrance.

                vii.     Rights relating to Automated Decision-Making and Profiling - You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects or similarly significantly affects you, subject to the exceptions set out in the GDPR. Where applicable, we will provide suitable safeguards including human intervention.

               viii.     Right to Withdraw Consent - Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

b)    To exercise any of the above rights, contact us at support@rightask.ai. We may request additional information to verify your identity before processing your request. We will respond without undue delay and, in any event, within one month.

For details on international data transfers from the EEA, UK, or Switzerland (including our use of Standard Contractual Clauses), please see Section 8 (International Data Transfers) of this Privacy Policy.

7.4  Canadian Residents (PIPEDA)

Canadian residents have the right to access the personal information we hold, and to request that it be corrected if it is inaccurate or incomplete. You may also withdraw your consent for the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Contact us at support@rightask.ai.

7.5  No Automated Decision-Making

Our Platform and AI tools are designed to support your own decision-making and should not be used to make, or to contribute to, any “significant decisions” as defined under applicable laws and regulations (e.g., such as decisions related to financial services, employment, housing, education, or healthcare). Any output generated by the Platform is provided for informational purposes only. You remain fully responsible for reviewing, verifying, and deciding how (or whether) to rely on or act upon any AI-generated content or information. RightAsk AI makes no representations or warranties regarding the accuracy, completeness, or suitability of any output for your specific purposes, and you assume all risk associated with its use.

8.  International Data Transfers

RightAsk is headquartered in the United States. Personal data collected via the Platform may be transferred to and processed in the United States (and other countries outside the EEA, UK, or Switzerland where our sub-processors operate)..

For transfers from the EEA, UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCC’s. A copy of the corresponding records can be requested at support@rightask.ai.

9.  Data Security

We implement industry-standard technical and organizational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security assessments.

No method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach, we will notify affected users and relevant authorities in accordance with applicable law. While we use commercially reasonable efforts to protect your data and information, we cannot guarantee absolute security

10.  Children's Privacy

The Platform is not directed to, and is not intended for use by, individuals under the age of 18. We do not knowingly collect, use, or process personal information from minors.

If we become aware that we have inadvertently collected personal data from a person under 18 without verifiable parental consent, we will promptly delete that information. Contact us at legal@rightask.ai if you believe a minor has provided personal data.

11.  Third-Party Links & Services

The Platform may contain links to third-party websites or integrate with third-party services that we do not control. This Privacy Policy does not apply to those third parties or their practices. We encourage you to review the privacy policies of any third-party services you access through the Platform.

12.  Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the effective date at the top of this page and, where changes are material, provide additional notice via email or in-Platform notification. Your continued use of the Platform after any update constitutes your acceptance of the revised policy.

13.  Contact Us

© 2026 RightAsk AI, LLC All rights reserved.