Privacy Policy

Ask Lou LLC (“Asklou”, “we”, “us”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our software services, websites, and related offerings (the “Services”). By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Information we collect

We may collect the following categories of information.

A. Information you provide to us

Account information: name, email address, password, and other information you provide when creating an account or using the Services.
Organization information: company name, role/title, and information about your organization and users.
Payment and billing information: billing contact details and payment method details, which may be collected and processed by our payment processors.
Communications: information you provide when you contact us (e.g., support requests) or otherwise communicate with us.

B. Customer Data you submit through the Services

The Services allow you and your authorized users to submit or generate content, including business records, contacts, jobs/projects, messages, call logs, documents, photos/media, and other information (collectively, “Customer Data” as defined in our Terms of Use). Customer Data may include personal information if you upload it or include it in communications.

If you use communications features (such as SMS/MMS, voice, or email), Customer Data may include phone numbers, message content, delivery status, call metadata, and related logs.

C. Information collected automatically

Usage and log data: pages or screens viewed, features used, actions taken, timestamps, referring pages, error logs, and other diagnostics.
Device and network data: IP address, general location derived from IP, browser type, device identifiers, operating system, and similar information.
Cookies and similar technologies: we and our service providers may use cookies, pixels, SDKs, and similar technologies for authentication, preferences, analytics, security, and online advertising measurement. This includes third-party ad technologies such as Google and Meta tags/pixels where enabled. For a cookie-by-cookie view, including provider and retention details, see the Cookie Details section in our Cookie Policy.

D. AI-related inputs and outputs

If you use AI-enabled features, we process the inputs you provide and the outputs generated to provide the feature, operate and secure the Services, and for other purposes described in this Privacy Policy. AI outputs may reproduce or reflect portions of the inputs you provide.

E. Sensitive information

You must not submit sensitive regulated data to the Services, including but not limited to protected health information (PHI), payment card data (PCI data), Social Security numbers, government identifiers, or other information subject to a specialized legal regime unless we have a separate written agreement.

The Services are not designed to process regulated data, and we are not acting as a Business Associate under HIPAA or as your processor for PCI or any other regulated-data framework by default. Where you upload regulated data without a separate written agreement, you do so at your own risk and in violation of these terms.

If we determine or reasonably suspect that prohibited data has been uploaded, we may, without prior notice, suspend or terminate your account, disable affected features, and delete, quarantine, or restrict processing of that data where technically and legally feasible to protect the Services and our users.

2. How we use your information

We use the information we collect to:

Provide, operate, and improve the Services.
Authenticate you and manage your account.
Communicate with you (e.g. service-related notices, support, and, with your consent, marketing).
Provide AI-enabled functionality and generate outputs you request.
Prevent, detect, and investigate fraud, abuse, security incidents, and violations of our Terms.
Comply with legal obligations and protect our rights and the security of the Services.
Analyze usage in an aggregated, de-identified way to improve our product and experience.
Measure and improve our Google and Meta (Meta Ads/Instagram/Facebook) marketing campaigns, including website conversion tracking and campaign analytics.

We may share personal information for cross-context behavioral advertising. Under California law, this may be considered ‘sharing.’ You have the right to opt out. If you send a valid Global Privacy Control (GPC) signal where legally applicable, we treat that as a request to opt out of personal information sharing for cross-context behavioral advertising and related targeted measurement practices.

3. Sharing and disclosure

We may share information:

With your consent or at your direction.
With service providers who help us operate the Services (e.g. hosting, analytics, support, communications providers, payment processing), under contracts that limit their use of the information.
With AI and infrastructure providers that help us provide AI-enabled features and operate the Services (for example, model and cloud providers), consistent with your use of the Services and our contracts with them.
With marketing and advertising providers such as Google and Meta, to help us run, measure, and optimize our own advertising and remarketing campaigns. This may include sharing identifiers and usage data needed for ad delivery and reporting.
For legal and safety reasons: to comply with law, respond to lawful requests, protect our rights and users’ safety, or in connection with a merger, sale, or financing.
In aggregated or de-identified form that does not identify you.

4. Data retention and security

We retain your information for as long as your account is active or as needed to provide the Services, comply with law, and resolve disputes. We implement reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse; no system is completely secure.

5. Your rights and choices

Depending on where you live, you may have rights to:

Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Delete your personal information, subject to legal and operational requirements.
Object or restrict certain processing.
Portability of your data in a structured, commonly used format.
Withdraw consent where we rely on consent.
Opt out of marketing emails via the link in our emails or your account settings.
Limit ad tracking where available: you may control personalized advertising through platform settings (for example, Google Ad settings or Meta ad preferences) and browser/device cookie controls. You can also contact us to learn how our marketing tags affect you.

To exercise these rights, contact us at privacy@asklou.co. We will respond within the time required by applicable law. You may also have the right to lodge a complaint with a supervisory authority.

California residents (CCPA/CPRA): If you are a California resident, the following applies in addition to the rights listed above.

Personal information we collect: identifiers (such as name, email address, account identifiers), commercial information (payment and service usage information), internet or network activity (IP address, device identifiers, usage logs, and cookies), geolocation information derived from IP or device settings, inferences about preferences and behavior for security, optimization, and ad relevance, and Customer Data you submit through the Services.
Sources of personal information: information you provide directly, data generated from your use of the Services (including communications and automation logs), customer or business data you upload, and information from service providers and advertising/analytics platforms we use.
Categories of third parties: cloud hosting and infrastructure providers, analytics and attribution providers, payment processors, communications providers, AI and model providers, fraud/security vendors, and marketing/advertising partners (including Google and Meta) involved in campaign measurement and retargeting.
Sale or sharing: We do not sell personal information in exchange for money or other valuable consideration. We may share personal information for cross-context behavioral advertising and similar advertising-relevant services with permitted partners; under California law this can qualify as “sharing.” You may opt out as described below.
If you send a valid Global Privacy Control (GPC) signal, where applicable by law, we will apply it to your account as a request to limit this sharing.
Retention: We keep personal information while your account is active and for as long as needed to provide the Services, settle disputes, comply with legal obligations, and protect against fraud or security risks. Some categories may be retained longer if required by law or for legitimate business and accounting records.
Right to know: You may request that we disclose categories of personal information we collected in the prior 12 months, the categories of sources, the business or commercial purpose of collection, and categories of third parties with whom we shared it.
Right to delete: You may request deletion of personal information we hold, subject to exceptions for legal, tax, fraud-prevention, or security needs.
Right to correct: You may request correction of inaccurate personal information and ask us to update inaccurate or incomplete records where applicable.
Right to opt out of sale/share: You may opt out of sharing for cross-context behavioral advertising and similar marketing activity by contacting us at privacy@asklou.co and using available browser or platform controls where noted in Section 5. You may also use a Global Privacy Control (GPC) signal from your browser or device where available.
Right to limit sensitive personal information use: If any sensitive personal information is present in data you submit, you may request that we limit its use to what is necessary to provide the Service and you may ask us to delete it where possible. We may deny requests where processing is required for security, legal, or limited operational purposes.

To exercise any California rights, contact us at privacy@asklou.co. We will respond as required by applicable law.

EU/UK residents: We process personal data as described in this policy. Where we act as a processor on your behalf (e.g. for your customers’ data), we do so under our Terms and any applicable Data Processing Agreement.

If you require a Data Processing Addendum (“DPA”) for GDPR/UK GDPR purposes, contact us at privacy@asklou.co.

6. International transfers

We may store and process information in the United States and other countries. If you are outside the U.S., your information may be transferred to and processed in the U.S. or elsewhere. We use appropriate safeguards (e.g. standard contractual clauses where required) for such transfers.

7. Children

The Services are not directed at children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us so we can delete it.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on our website or in the Services and update the effective date. For material changes, we will use reasonable efforts to notify you (e.g. by email or in-app notice). Your continued use after the effective date constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions or to exercise your rights, contact us at:

Ask Lou LLC
Email: legal@asklou.co