Privacy Policy
Last updated: February 2026
At AskOro, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect, and handle your information when you use our service. By using AskOro, you agree to the practices described in this policy.
Information We Collect
- •Account information (email, name, organization details)
- •Content from connected integrations (documents, messages, files) - only what you explicitly authorize
- •Usage data (queries, feature usage, performance metrics)
- •Authentication tokens for connected services
How We Use Your Information
- •To provide AI-powered search and answers across your connected content
- •To improve and optimize our service performance
- •To provide customer support and respond to inquiries
- •To communicate important updates about the service
Data Storage and Security
- •Indexed content is stored in AWS S3 (us-west-2), encrypted at rest (AES-256) and in transit (TLS 1.2+)
- •Each workspace's data is stored in isolated, access-controlled buckets
- •OAuth tokens used to connect integrations are stored securely and never shared with third parties
- •Your data is NEVER used to train AI models or shared with third parties
Your Rights
- •Access your data at any time through your account
- •Request deletion of your data - we'll comply within 30 days
- •Export your data in standard formats
- •Disconnect integrations and remove content from our index
- •Object to processing or request restrictions on data usage
Data Retention
- •Indexed content from connected integrations is retained as long as the integration remains connected
- •When you disconnect an integration, all associated content is permanently deleted within 24 hours
- •Account data is retained for 30 days after cancellation, then permanently deleted
- •Audit logs are retained for 90 days for security purposes
Data Archival and Removal
- •Disconnect any integration at any time from the dashboard to immediately remove its data from your knowledge base
- •To request full account deletion and data removal, contact hello@askoro.dev
- •All data is permanently deleted within 30 days of a removal request
- •AskOro does not archive or sell user data
Compliance
- •We are GDPR compliant for users in the European Union
- •We follow CCPA requirements for California residents
- •SOC 2 Type II certification (in progress)
- •Regular third-party security audits
Third-Party Services
AskOro connects to third-party services (Slack, Notion, GitHub, etc.) with your explicit permission. When you authorize these connections:
- •We only access the content you explicitly authorize
- •We respect the privacy policies of each connected service
- •You can revoke access at any time
Cookies and Tracking
We use essential cookies to maintain your session and provide core functionality. We do not use advertising cookies or sell your data to advertisers. You can control cookie preferences through your browser settings.
Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or through the service. Continued use after changes constitutes acceptance of the updated policy.
Contact Us
Questions about this Privacy Policy or how we handle your data? We're here to help. Contact us at privacy@askoro.dev or visit our contact page.