Privacy Policy

This Privacy Policy explains how Hublo Technologies (trading as HUBLO.AI) collects, uses, stores, and protects your personal data when you use AskLLM at askllm.io (the Service). We comply with the GDPR, India's Digital Personal Data Protection Act, 2023 (DPDP Act), and the IT Act 2000 (including reasonable security practices under section 43A and applicable rules). By using the Service, you agree to the practices described in this Policy.

1. Corporate entity & data fiduciary

Hublo Technologies (trading as HUBLO.AI) is the organization responsible for AskLLM on askllm.io. Depending on your jurisdiction, we act as your Data Fiduciary (India — DPDP Act) and/or Data Controller (EU/UK — GDPR) for the personal data described in this Policy.

Website: https://askllm.io
Contact: grievance [at] askllm.io

2. Data collection & processing inventory

2.1 Data you provide — When you run an audit or join the waitlist:

• Contact: name and work email address
• Brand: company name, category, and competitor names you compare against
• Audit results: scores, mention counts, and raw AI responses stored to deliver your report
• Waitlist (if you join): role, marketing budget, and optional message

2.2 Data collected automatically

• Approximate country derived from connection metadata to pre-fill an optional audit form field (not precise location; you may change or clear it)
• IP address (hashed) for rate limiting and abuse prevention — raw IP is never stored
• First-party usage analytics via Google Analytics 4 (pages visited, device and browser type, approximate geography)
• Aggregate site analytics via Vercel Web Analytics (page views and performance metrics)
• Error diagnostics via Sentry

2.3 Paid transactions — When you complete a paid purchase, our payment processor facilitates collection of billing and transaction data as described below.

2.4 Payment-related data (paid purchases)

• Billing name
• Email used for receipts
• Billing address, if collected for the transaction
• Transaction IDs and references
• Payment method type (for example card, UPI, net banking, wallet)

We do not store raw card numbers on our infrastructure. Card data is handled by Razorpay in a PCI DSS Level 1 environment.

2.5 Data categories we do not collect

• We do not sell your personal data
• We do not use your brand data to train AI models
• We do not use cross-site advertising trackers or sell data for ad profiling
• We do not store raw card numbers or CVV codes

3. Lawful processing purposes

We process data to provide the audit service; send audit reports and transactional emails; improve the Service; prevent fraud; and meet legal compliance obligations. Marketing emails require separate opt-in. During MVP, we send transactional emails only — audit results, waitlist confirmation, and re-audit confirmations.

4. Sub-processors & disclosure protocol

We engage the following sub-processors to operate the Service. Each processes data only for the purpose listed and under a Data Processing Agreement (or equivalent contractual safeguards) where required. We may disclose data when required by law.

• Supabase — database hosting and authentication. Privacy Policy
• Vercel — application hosting, edge delivery, and Web Analytics. Privacy Policy
• Google — Google Analytics 4 for first-party usage measurement (pages, device and browser type). Privacy Policy
• Razorpay — payment processing for paid purchases (billing details, transaction references; PCI DSS Level 1). Privacy Policy
• Sentry — error and performance diagnostics. Privacy Policy
• Cloudflare — Turnstile bot protection on forms and audit submission. Privacy Policy
• OpenAI and Google (Gemini) — audit LLM APIs for ChatGPT and Gemini in production consumer audits; your brand submission is sent per audit to generate reports, not to train their models under our agreements. See OpenAI and Google privacy policies.

We also use Resend (transactional email) and Upstash (rate limiting).

5. Retention schedules & statutory holds

Audit data is retained for the duration of our service. You may request deletion at any time (see Data Subject Rights). Anonymised statistics may be retained indefinitely.

Financial and tax records (payment transaction references, invoices, and tax-related records) are generally retained for up to eight (8) years from the date of transaction where required under applicable tax and accounting law. Deletion requests do not apply to these records where retention is mandated by law.

6. Security safeguards & controls

We use encryption in transit (HTTPS/TLS), encryption at rest, access controls, IP hashing (no raw IP stored), and audit logging. We implement safeguards consistent with reasonable security practices under the Information Technology Act, 2000 and applicable rules. No system is fully secure. Report concerns to grievance [at] askllm.io.

7. Data subject rights & erasure requests

Under GDPR and DPDP you have the right to access, rectification, erasure, restriction, portability, object, and withdraw consent. To request deletion, email grievance [at] askllm.io with subject line Delete my data and the email you used. We will manually process your request within 30 days.

For India: Grievance Officer contact grievance [at] askllm.io. Consumer complaints are acknowledged within 48 hours and we aim to resolve them within 30 days, consistent with Consumer Protection (E-Commerce) Rules, 2020.

8. Cookie & telemetry policy

We use essential cookies (for example admin session). Google Analytics 4 runs with Consent Mode: analytics storage is granted only after you accept analytics in our cookie banner (where shown). Vercel Web Analytics collects anonymous page-view metrics. We do not use advertising or cross-site tracking cookies.

9. Minors & age restriction

The Service is not intended for individuals under 18. We do not knowingly collect data from minors.

10. Cross-border data transfers

Data may be transferred outside the EEA. We use Standard Contractual Clauses and Data Processing Agreements with sub-processors.

11. Policy amendments

We may update this Policy. The Last updated date reflects changes. Continued use constitutes acceptance.

12. Regulatory contact routing

Hublo Technologies (trading as HUBLO.AI)
Email: grievance [at] askllm.io
Website: https://askllm.io
For full contact details (address, phone) see our Contact page.