Privacy at WhatBuyersAsk

1. Scope

This Privacy Policy describes how Simple AI LLC ("WhatBuyersAsk", "we", "us", or "our") collects, uses, discloses, and protects information through the WhatBuyersAsk website, applications, and related services (the "Services"). It applies to account holders, authorised users, and visitors.

2. Information we collect

The public website collects the details you choose to place in an enquiry, including your work email, organisation, website, goal and buying timeline. Its forms open an email draft on your device; they do not confirm that an enquiry has been delivered. With Analytics consent, Google Analytics and our first-party storage measure page views, sources, repeat visits, content engagement and evaluation actions using pseudonymous identifiers. Names, email addresses, company websites and message contents are excluded from our analytics event data.

When you choose Continue with Google in the app portal, Google provides your name, verified email address and a stable account identifier. We store your name, email, an account identifier derived from that Google identifier, and sign-in records. We also store the agency details and workspace information you provide. Google sign-in does not give us access to your Gmail messages, Drive files or Search Console data. We do not retain Google access or refresh tokens.

3. How we use information

We use enquiry details to respond to your request. With your optional consent, we measure acquisition, content interests and indications of buying intent. Intent categories are rule-based estimates from activity on this website, not facts about your identity or a prediction that you will buy. With separate Relevant content consent, we may suggest related pages on this device. With separate Google interest signals consent, Google Signals may contribute aggregate interests for eligible Google users; we cannot see an individual’s Google account or browsing history.

We use Google sign-in information to identify your account, sign you in, match invitations addressed to your verified email and manage your access to agency workspaces. Your name and email can appear to authorised members of your workspace. This account access is separate from optional website analytics and advertising choices.

4. Legal bases

Where applicable, we rely on a legal basis such as performance of a contract, legitimate interests, consent, or compliance with legal obligations. The basis depends on the context and type of information.

5. How information is shared

We may share information with documented service providers, business partners, and other parties when needed to operate the Services, follow your instructions, protect rights and security, or comply with applicable law.

Google sign-in information is processed by the providers that host and secure the app portal and its database, and is visible to authorised workspace members where needed for team administration. We do not sell Google sign-in information or use it for advertising. Google sign-in credentials and tokens are not sent to the research or article-writing models.

6. Service providers and subprocessors

The public website uses Cloudflare for hosting and delivery. With Analytics consent, Google Tag Manager manages Google Analytics collection. Google interest signals require a separate optional choice. LinkedIn Insight Tag requires its own optional choice and supports aggregate professional-audience and campaign reporting; we do not send enquiry fields or hashed emails to LinkedIn. With Company-network insights consent and an active provider connection, our server sends the visiting IP address to Ipregistry once per seven-day cache period after engagement to infer a possible organisation and domain. Network matches are unverified and can refer to a shared office; they do not identify a person or establish their employer. Names and domains from these lookups stay in our internal company report, not Google Analytics. With separate Partner referral tracking consent, Reditus uses a referral cookie and receives the signup email and workspace identifier after a new workspace is created, to credit the referring partner. These signup fields are excluded from Google Analytics. Enquiry forms open your chosen email application.

The app portal uses Google for sign-in, Cloudflare for hosting and private file storage, and Amazon Web Services for its database hosting in India. Research and article requests use OpenRouter and the selected model providers to process the briefs, source material and instructions needed for the requested work; this is separate from Google sign-in.

7. International transfers

Information may be transferred to and processed in countries other than your own. Where required, we use appropriate safeguards and transfer mechanisms under applicable law.

8. Data retention

We retain enquiry information for as long as needed to respond and manage the relationship, subject to applicable obligations. Consent choices on this device expire after 180 days. Our local journey history expires after 90 days without a visit, and intent and interest evidence uses a rolling 30-day window. Google Analytics cookies expire after 90 days, refreshed on use; GA4 event and user data retention is set to 14 months. Google and LinkedIn account controls also apply to data those services hold. Our company service does not store raw IP addresses: its keyed lookup cache expires after seven days, and internal company-network observations and session records expire after 90 days with daily cleanup. Keyed network and session hashes let us count separate consented, engaged sessions from the same network without repeating the lookup. A new browser session starts after 30 minutes of inactivity; these counts do not identify people.

We retain portal account details while the account is in use and until an applicable deletion request has been processed, subject to security and legal retention needs. Signing out ends the current session but does not delete the account, workspace or sign-in records. The portal sign-in cookie expires after seven days; the temporary sign-in verification cookie expires after ten minutes.

9. Security

We use administrative, technical, and organisational measures designed to protect information. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

10. Your rights and choices

Use Privacy settings in the footer to accept, reject or withdraw optional choices at any time. Withdrawing Analytics consent clears this site’s analytics cookies and local journey data and stops future collection on this browser. It does not automatically delete already processed aggregate reports or information held by Google under your own account. Depending on your location, you may also have rights to access, correct, delete, restrict or object to processing and to data portability. Contact us to exercise an applicable right.

To request access to, correction of or deletion of portal account information, contact the email in Section 13 using your account email. We may verify your identity before acting. You can also remove the WhatBuyersAsk connection from your Google Account connections settings. Removing that connection does not by itself delete information already stored in your agency workspace or end an existing portal session; sign out and contact us if you also want account deletion.

11. Children’s privacy

The Services are intended for authorised business use and are not directed to children. If you believe a child has provided personal information, please contact us.

12. Changes to this policy

We may update this policy from time to time. If a change is material, we will provide notice through the Services or another appropriate channel. The date at the top shows when this policy was last updated.

13. Contact

If you have a question about this policy or want to exercise an applicable privacy right, contact us using the details below.