Privacy Policy

ASK RD is operated by Ask-RD Auto LLC ("we", "us"), trading as ASK RD. Ask-RD Auto LLC is the data controller for the personal data described in this notice, which means we decide why and how it is processed. You can reach us at support@askrdauto.com.

ASK RD is a car-buying research and decision-support tool. We keep data collection minimal: your questions are sent to an AI provider so a brief can be written, your account and saved deal information are stored so you can come back to them, and payments are handled entirely by our reseller Stripe — we never see or store your card details.

• Your question text. Sent to our server and on to our AI model provider — today OpenAI models (GPT-5.6 Sol and GPT-5.6 Luna) reached through the Lovable AI gateway — to produce a brief. Purpose: providing the service. Legal basis: performance of our contract with you. Don't include information you would not want processed by a third-party AI service — passwords, government ID numbers, medical records or full financial account numbers.
• Vehicle deal images and documents you upload. Processed in the same request as your Deal Check: your device prepares the pages, they are sent to the AI model provider named above for the read, and they are not written to our file storage or database as uploaded files afterwards. If you choose to save the result, only the written summary is saved — never the photo or PDF itself. Purpose: providing the service. Legal basis: performance of our contract.
• Account data. Email address, login credentials handled by our authentication provider, and your plan level. Purpose: creating and securing your account and granting the access you paid for. Legal basis: performance of our contract.
• Saved vehicles, deals and requests. Content you choose to save, including Concierge or lead requests with your name, phone number, preferred vehicle and your consent to be contacted. Purpose: providing the service and following up on your request. Legal basis: performance of our contract and your consent for calls and texts.
• Purchase records. Subscription and purchase status, transaction identifiers and plan entitlements received from Stripe. Purpose: giving you the access you paid for and keeping records. Legal basis: contract and legal obligation. We do not receive or store your card number.
• Basic technical data. Standard web request information (IP address, browser type, timestamps) and abuse-prevention counters. Purpose: security, fraud and abuse prevention, reliability. Legal basis: our legitimate interest in keeping the service available and safe.
• Support messages. What you send us by email. Purpose: answering you. Legal basis: contract and legitimate interest.

You buy directly from Ask-RD Auto LLC. Stripe is our payment processor and handles card details, billing and invoicing on our behalf; customer service, cancellations and refunds are handled by us. When you buy a plan, Stripe collects and processes your payment details, billing address and tax information directly under Stripe's privacy notice. We receive from Stripe only what we need to give you access: your email address, subscription or purchase status and transaction identifiers. See our Refund & Cancellation Policy.

• Stripe, our payment processor, for subscription management, payments, tax compliance and invoicing.
• Service providers acting on our instructions: application hosting and content delivery, our database and authentication provider, and AI model processing via the Lovable AI gateway, which routes your request to a third-party AI model provider.
• Google Fonts for typography.
• Professional advisers (legal, accounting) where necessary.
• Authorities or other parties where we are required to by law.

We do not sell your data, and we do not use third-party analytics services or advertising pixels.

So we can tell which adverts and pages actually work, we record our own basic usage events on our own systems. The steps we count are: landing on the site, clicking a call to action, starting and finishing an upload, starting and finishing an analysis, starting and finishing a sign-up, and starting and finishing a checkout. With each step we store the page path, the website that referred you, any campaign tags in the link you arrived through (utm_source, utm_medium, utm_campaign, utm_content, utm_term), a random session identifier, your account identifier if you are signed in, and occasionally a small non-personal detail about the step itself (for example how many pages were uploaded).

The random session identifier is stored in your browser's local storage so the steps of one journey can be counted together; it stays until you clear your browser data. These records are not designed or intended to hold your deal figures, the contents of uploaded documents, your notes, your name, your phone number or your email address, and they are never shared with an advertising network or a third-party analytics service. Legal basis: our legitimate interest in understanding and improving our own service.

• Account data: for as long as your account is open, then deleted within 90 days of closure.
• Deal summaries and requests saved to your account: until you delete them, or within 90 days of account closure.
• Saved briefs held in your browser: on your device until you delete them or clear your browser data — we hold no copy.
• Uploaded photos and PDFs: not stored as files on our servers at all — they are sent for the read and then discarded.
• A finished Deal Check result: held for up to 24 hours so you can come back to it if your phone locks or you leave the page while RD is reading, then deleted automatically.
• Lead and Concierge requests: up to 24 months after the request, so we can follow up and resolve disputes.
• Purchase and tax records: as long as tax and accounting law requires (typically 7 years).
• Measurement events described above: up to 24 months.
• Technical and abuse-prevention logs: up to 12 months.

When data is no longer needed for these purposes it is deleted or anonymised.

Saved briefs are kept in your browser's local storage on the device you used, not synced to your account — clearing your browser data or switching device means those copies are gone. Separately, if you are signed in and save a Deal Check summary, or submit a Concierge or lead request, those records are stored on your account in our database and are available wherever you sign in. Your account is never a backup of the device-local saved briefs.

We use appropriate technical and organisational measures to protect your data: encryption in transit (HTTPS), encryption at rest with our hosting and database providers, row-level access rules so accounts can only reach their own records, restricted administrative access, and secrets stored outside application code.

Our providers, including Stripe and our AI and hosting providers, may process data in the United States and other countries. Where data leaves the UK or EEA, transfers rely on Standard Contractual Clauses or an adequacy decision.

We use essential cookies and local storage only — to keep you signed in, remember your preferences, protect against abuse, and hold the first-party measurement identifier and campaign tags described in "How we measure our own marketing" above. We do not use third-party analytics services or advertising cookies. You can clear or block cookies in your browser settings, but signing in will stop working.

Every brief is generated by a large language model. ASK RD does not currently perform live web research or retrieve live prices, listings, filings or news. Briefs are written from model knowledge and are labelled that way in the product. Model output can be incomplete or wrong — verify anything you are about to sign or pay for.

ASK RD is intended for users 13 and older and is not directed at children.

Depending on where you live, you have the right to access, correct, delete, port or restrict the personal data we hold about you, to object to processing based on legitimate interests, and to withdraw consent (for example to calls and texts) at any time. You can delete saved briefs from the Saved page or by clearing site data in your browser. For anything else, email support@askrdauto.com and we will respond within one month. UK/EEA users also have the right to complain to their data protection supervisory authority.

Questions about this policy: support@askrdauto.com. See also our Terms of Service, Refund Policy and Support page.