GDPR Compliance

Under GDPR:

• You (the AskBiz customer) are the Data Controller — you determine the purpose and means of processing your customers' personal data
• AskBiz is the Data Processor — we process data on your behalf, under your instructions

This means you are responsible for having a lawful basis to share your customers' data with AskBiz (typically legitimate interest for analytics, or consent). AskBiz's Data Processing Agreement (DPA) is available to download from Account Settings → Privacy.

As an individual using AskBiz, you have the right to:

• Access — request a copy of all personal data AskBiz holds about you
• Rectification — correct inaccurate data
• Erasure ('right to be forgotten') — request deletion of all your data
• Portability — receive your data in a machine-readable format (JSON or CSV)
• Restriction — ask us to stop processing your data while a dispute is resolved
• Object — object to processing based on legitimate interests

To exercise any of these rights, email privacy@askbiz.co. We will respond within 30 days.

Data from your connected platforms (Shopify customers, Amazon buyers, etc.) is:

• Processed only to generate your business insights
• Not shared with other AskBiz customers
• Not sold to third parties
• Not used for advertising
• Hashed at the PII level (email addresses become anonymised identifiers)
• Deleted when you disconnect the source or delete your account

AskBiz uses:

• Essential cookies — required for authentication and session management (no consent required)
• Analytics cookies — PostHog for product analytics (consent required; you can opt out)
• No advertising cookies — AskBiz does not use advertising networks or retargeting cookies

Manage cookie preferences from the cookie banner or Account Settings → Privacy → Cookies.