Privacy Policy

1. Introduction

Ashken AI ("we," "our," or "us") is committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information in connection with our AI chatbot services, website (ashkenai.com), and related platforms.

We are based in Quebec, Canada, and comply with PIPEDA and Quebec's Law 25.

2. Who We Are

Ashken AI builds and deploys custom AI chatbot systems. "Clients" are businesses that hire us. "End Users" are their customers who interact with chatbots. "Visitors" are individuals who visit ashkenai.com.

3. Information We Collect

3.1 Website Visitors

Name, email, phone (via contact forms or demo chatbot). Usage data (IP, browser, pages visited) via standard analytics.

3.2 Clients

• Business contact information
• Business data for chatbot training
• Technical credentials (stored encrypted)
• Payment information via Stripe (we do not store card numbers)

3.3 End Users (Chatbot Interactions)

Conversation content, lead capture info (name, email, phone if provided), session metadata.

For chatbot interactions, the Client is the data controller and Ashken AI acts as data processor. A disclaimer is displayed informing end users that responses are AI-generated.

4. How We Use Information

• To provide and improve chatbot services
• To communicate with clients
• To process payments
• To monitor chatbot accuracy
• To comply with legal obligations

We do not use end user data to train AI models. We do not sell personal information.

5. AI Processing and Third-Party Services

Chatbots use OpenAI's API (currently GPT-5 Mini or GPT-5.4 Mini). OpenAI's API does not use submitted data for model training by default.

Other third-party services:

• Supabase — Database
• Stripe — Payments
• Cloudflare — Hosting/CDN
• Calendly — Scheduling
• Pinecone — Optional vector DB

6. Data Storage and Security

• Encryption at rest and in transit
• Access controls and authentication
• Encrypted storage of credentials
• Row-level security for client isolation
• Regular monitoring

Data may be stored outside Canada (e.g., US) via infrastructure providers. Clients acknowledge this cross-border transfer.

Retention: Data retained while hosting is active. Deleted within 30 days of cancellation. In the event of non-payment, data is permanently deleted 30 days after the payment due date, as described in our Service Agreement.

7. Disclosure

We share information only:

• With third-party service providers for service delivery
• With Clients (analytics/conversation data)
• When required by law
• To protect rights and safety

8. Your Rights

Under PIPEDA and Quebec law, you have the right to:

• Access your personal information
• Correction of inaccurate data
• Deletion of your data
• Withdrawal of consent
• Data portability
• File a complaint

Contact noah@ashkenai.com. We respond within 30 days. End users should contact the Client business first.

9. Cookies

Our website may use cookies for analytics. The chat widget uses session identifiers for continuity but does not use third-party tracking cookies.

10. Children's Privacy

Services are directed at businesses, not individuals under 16. We do not knowingly collect information from children.

11. Changes

We may update this policy. Material changes will be communicated to active clients.

12. Contact

Email: noah@ashkenai.com

Phone: 438-833-1534

Website: ashkenai.com

Complaints: Office of the Privacy Commissioner of Canada or Commission d'accès à l'information du Québec.