Privacy Policy

ASK RD is operated by Ask-RD ("we", "us"), trading as ASK RD. Ask-RD is the data controller for the personal data described in this notice, which means we decide why and how it is processed. You can reach us at support@askrd.app.

ASK RD is a car-buying research and decision-support tool. We keep data collection minimal: your questions are sent to an AI provider so a brief can be written, your account and saved deal information are stored so you can come back to them, and payments are handled entirely by our reseller Paddle — we never see or store your card details.

• Your question text. Sent to our server and on to our AI model provider to produce a brief. Purpose: providing the service. Legal basis: performance of our contract with you. Don't include information you would not want processed by a third-party AI service — passwords, government ID numbers, medical records or full financial account numbers.
• Vehicle deal images and documents you upload. Sent to the AI provider for analysis and used to produce your result. Purpose: providing the service. Legal basis: performance of our contract.
• Account data. Email address, login credentials handled by our authentication provider, and your plan level. Purpose: creating and securing your account and granting the access you paid for. Legal basis: performance of our contract.
• Saved vehicles, deals and requests. Content you choose to save, including Concierge or lead requests with your name, phone number, preferred vehicle and your consent to be contacted. Purpose: providing the service and following up on your request. Legal basis: performance of our contract and your consent for calls and texts.
• Purchase records. Subscription and purchase status, transaction identifiers and plan entitlements received from Paddle. Purpose: giving you the access you paid for and keeping records. Legal basis: contract and legal obligation. We do not receive or store your card number.
• Basic technical data. Standard web request information (IP address, browser type, timestamps) and abuse-prevention counters. Purpose: security, fraud and abuse prevention, reliability. Legal basis: our legitimate interest in keeping the service available and safe.
• Support messages. What you send us by email. Purpose: answering you. Legal basis: contract and legitimate interest.

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. When you buy a plan, Paddle collects and processes your payment details, billing address and tax information directly under Paddle's privacy notice. We receive from Paddle only what we need to give you access: your email address, subscription or purchase status and transaction identifiers. See our Refund & Cancellation Policy.

• Our Merchant of Record, Paddle, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Service providers acting on our instructions: application hosting and content delivery, our database and authentication provider, and AI model processing via the Lovable AI gateway (which routes to upstream model providers, currently Google Gemini models).
• Google Fonts for typography.
• Professional advisers (legal, accounting) where necessary.
• Authorities or other parties where we are required to by law.

We do not sell your data, we do not run advertising trackers, and we do not currently use third-party analytics or marketing pixels.

• Account data: for as long as your account is open, then deleted within 90 days of closure.
• Questions, briefs, saved deals and uploaded images: until you delete them, or within 90 days of account closure.
• Lead and Concierge requests: up to 24 months after the request, so we can follow up and resolve disputes.
• Purchase and tax records: as long as tax and accounting law requires (typically 7 years).
• Technical and abuse-prevention logs: up to 12 months.

When data is no longer needed for these purposes it is deleted or anonymised.

Some briefs and history are stored in your browser's local storage so they load instantly. Clearing your browser data or using another device means those local copies are gone.

We use appropriate technical and organisational measures to protect your data: encryption in transit (HTTPS), encryption at rest with our hosting and database providers, row-level access rules so accounts can only reach their own records, restricted administrative access, and secrets stored outside application code.

Our providers, including Paddle and our AI and hosting providers, may process data in the United States and other countries. Where data leaves the UK or EEA, transfers rely on Standard Contractual Clauses or an adequacy decision.

We use essential cookies and local storage only — to keep you signed in, remember your preferences and protect against abuse. We do not set analytics or marketing cookies. You can clear or block cookies in your browser settings, but signing in will stop working.

Every brief is generated by a large language model. ASK RD does not currently perform live web research or retrieve live prices, listings, filings or news. Briefs are written from model knowledge and are labelled that way in the product. Model output can be incomplete or wrong — verify anything you are about to sign or pay for.

ASK RD is intended for users 13 and older and is not directed at children.

Depending on where you live, you have the right to access, correct, delete, port or restrict the personal data we hold about you, to object to processing based on legitimate interests, and to withdraw consent (for example to calls and texts) at any time. You can delete saved briefs from the Saved page or by clearing site data in your browser. For anything else, email support@askrd.app and we will respond within one month. UK/EEA users also have the right to complain to their data protection supervisory authority.

Questions about this policy: support@askrd.app. See also our Terms of Service, Refund Policy and Support page.