Who this policy covers
Ask Your Audience (AYA) is provided by Ask your Audience Ltd. This policy applies when you visit an AYA website, create an Audience Snapshot, open an account, pay for a service, contact us or use our research platform, including through an authorised connected assistant.
AYA is the controller for website, account, billing, security and direct customer-relationship data. When an organisation uses AYA to process its own research briefs, audience lists, uploads or workspace content, that organisation may be the controller and AYA may act as its processor under the applicable agreement.
A separate source layer
AYA also recruits and interviews people to build Human Digital Twins. The privacy information supplied during that recruitment and interview governs that source material. We do not expose interview transcripts or direct identifiers to customers through ordinary research results.
The information we handle
- Website and device data: pages visited, approximate location derived from IP address, browser, device, referrer and performance information.
- Snapshot data: the question, selected country and generation, generated result, run status, browser identifier and creator claim token.
- Account data: name, email address, authentication records, workspace, role and preferences.
- Research content: briefs, questions, audience criteria, files and other material you provide, together with generated responses and analysis.
- Commercial data: plan, transaction status, invoices and limited payment metadata. Card details are handled by Stripe rather than stored by AYA.
- Communications: support requests, feedback and other messages you send us.
With analytics consent, we record approved campaign tags, the referring-site origin, a privacy-safe landing path and visit times against a random first-party browser identifier. We may link the first visit and signup context to your account, Snapshot, research use and purchases to understand how people discover and use AYA. This optional acquisition state is shared between our public website and app and expires in your browser after up to 180 days. Withdrawing analytics consent stops further collection and clears that browser state without removing functional Snapshot recovery. An optional answer about how you heard of AYA is stored separately in your profile.
Please do not submit unnecessary special-category data, confidential personal data, or information about a named individual unless you have a lawful reason and the right safeguards to do so.
Why we use it
| Purpose | Typical data | Legal basis |
|---|---|---|
| Provide Snapshot and platform services | Questions, account and research content | Contract, or steps requested before a contract |
| Secure, troubleshoot and prevent abuse | Account, device, log and usage data | Legitimate interests and legal obligations |
| Process payments and keep records | Billing and transaction data | Contract and legal obligations |
| Improve product performance | Consented analytics and feedback | Consent for non-essential storage; legitimate interests where no storage/access rule applies |
| Send service and requested messages | Name, email and communication history | Contract, legitimate interests or consent, depending on the message |
Where we rely on legitimate interests, we balance the benefit against your rights. You can object in the circumstances described below.
How research content is processed
AYA combines recorded-interview source material with automated systems to generate decision-support evidence. We may send the information needed for a requested workflow to contracted model and infrastructure providers. Those providers process it for us under their applicable service terms and safeguards.
AYA results are generated evidence, not a new live statement by the interviewed person, a forecast, or professional advice. AYA does not make solely automated decisions about you that produce legal or similarly significant effects.
Connecting AYA to ChatGPT or another assistant
You can connect an existing AYA account through the assistant’s OAuth sign-in and consent flow. AYA records the account, workspace, connection and permissions you approve so it can authenticate requests and enforce access limits. Do not share your AYA password or access tokens in a chat.
The assistant can send research instructions, audience selections and files you share with AYA tools. Depending on the permissions you approve and the request you make, AYA returns relevant audience and digital twin profiles, study briefs, quoted token costs, available balance, progress, generated findings and report excerpts to that assistant. The assistant provider processes information received through its service under its own terms and privacy policy.
Paid research uses your existing AYA balance and requires approval of the prepared study and its quoted cost. The connector does not sell credits or subscriptions or provide checkout.
You can revoke an AYA connection through the available connection controls. Revoking access stops further use through that connection; it does not automatically delete saved research or information already returned to an assistant. For deletion of data held by AYA, use the rights-request contact below. For information held by the assistant provider, use that provider’s controls and privacy-request route.
International transfers
Some providers or support teams may process data outside your country. Where required, we use an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another valid safeguard. You can ask us for information about the safeguard relevant to your data.
How long we keep it
We keep personal data only as long as needed for the purpose collected, the service and account lifecycle, security and dispute handling, and legal or accounting requirements. Retention varies by record type.
- Snapshot recovery and creator-claim values stored in your browser are short-lived or removed when the flow completes.
- Account and workspace data is generally kept while the account is active and for a limited period afterwards where needed for recovery, security or legal claims.
- Billing records may be kept for the period required by tax and accounting law.
- Consent records are refreshed when the consent version changes or the saved preference expires.
You can ask about a specific record or request deletion at any time. We may retain limited information where law requires it or where necessary to establish, exercise or defend legal claims.
Your data-protection rights
Depending on where you are and the circumstances, you may ask us to access, correct, delete, restrict or transfer your personal data; object to processing; withdraw consent; or complain to a supervisory authority. Withdrawing consent does not affect earlier lawful processing.
Email privacy@askyouraudience.ai. We may need to verify your identity. We normally respond within one month, subject to permitted extensions and exceptions.
You may complain to Malta’s Information and Data Protection Commissioner, or the supervisory authority where you live or work.
Security and children
We use access controls, encryption in transit, managed infrastructure, logging and operational safeguards appropriate to the information and risk. No online service can promise absolute security, so please use a strong password and tell us promptly if you suspect misuse.
AYA is a business research service and is not directed to children. Do not use the service to collect children’s personal data without an appropriate lawful basis, safeguards and permissions.
Changes and contact
We may update this policy as AYA, our providers or the law changes. We will change the review date and provide a more prominent notice where a change materially affects your rights.
Questions or rights requests: privacy@askyouraudience.ai. General support: contact@askyouraudience.ai.