Skip to main content
ASHCROFT
Sign inAsk Ash

Ashcroft AI Privacy Policy

Version 1.0-beta. Effective: 2026-07-20.

DRAFT FOR ATTORNEY REVIEW. Patterned on privacy disclosures used by enterprise AI services; must be reviewed by qualified counsel (including for GDPR/CCPA applicability) before being treated as final.

This Privacy Policy explains what information Ashcroft AI ("Ashcroft," "we") collects when you

use the Ashcroft platform and Ash (the "Service"), how we use it, and the controls you have.

1. Information We Collect

  • Account information: name, email address, organization, role, authentication identifiers.
  • Customer Content: the information you submit to the Service, including conversations with

    • Ash, documents and files you import, ideas, decisions, notes, and profile details you choose

    to share (for example in a welcome conversation).

  • Voice: if you use voice features, audio is processed to produce a transcript. Audio

    • recordings are not stored; only transcripts are retained.

  • Usage and technical data: log data, device/browser type, feature usage events, and

    • security events (for example sign-in receipts), used to operate and secure the Service.

  • Communications data: email delivery receipts and your communication preferences.

    • We do not intentionally collect information from children; the Service is for business use by

    adults.

    2. How We Use Information

  • To provide the Service: generating Output, remembering approved context, powering features

    • you use.

  • To operate and secure the platform: authentication, access control, rate limiting, audit

    • trails, fraud and abuse prevention.

  • To communicate with you: required account, security, and legal notices; optional

    • communications only per your preferences (with unsubscribe).

  • To improve the Service: aggregate, de-identified usage analysis. We do not sell your

    • personal information.

    3. AI Processing

    Customer Content you submit may be processed by third-party AI model providers under contract

    with Ashcroft solely to generate Output for you. Ashcroft configures such processing for

    service delivery, not for advertising.

    4. Where Your Data Lives (Processors)

    We use vetted service providers to operate the platform, including cloud hosting (Vercel),

    managed database and authentication (Supabase), email delivery (Resend), and AI model

    providers. Providers process data under their service agreements with us and only to provide

    their service.

    5. Access Control and Security

  • Organization data is isolated by row-level security enforced at the database layer.
  • Access inside an organization follows explicit roles, team memberships, and grants; every

    • grant records who created it and why, and access changes are recorded in an append-only

    audit log.

  • Sensitive operations require authentication; credentials are never stored in plaintext;

    • transport is encrypted.

    6. Your Rights and Controls

    Available in the product, not conditioned on plan tier:

  • See what Ashcroft stores about you (memory and profile surfaces).
  • Export your data.
  • Delete your account, with a governed deletion lifecycle and confirmation notices.
  • Withdraw consent for optional capabilities and disconnect connected services.
  • Unsubscribe from optional communications at any time.
  • See why someone has access to information about you (access explanations).

    • Depending on your jurisdiction, you may have statutory rights (access, correction, deletion,

    portability, objection). Requests can be made through the in-product controls or support

    surface; we honor applicable law.

    7. Retention

    We retain Customer Content while your account is active. On account deletion, content enters

    the governed deletion lifecycle and is removed or de-identified, except where retention is

    required by law or for security/audit integrity (append-only receipts retain minimal

    event records).

    8. Cookies and Similar Technologies

    The Service uses strictly necessary cookies for authentication and session integrity. We do

    not use third-party advertising cookies.

    9. Changes

    We will post updates to this Policy with a new version and effective date, and notify you of

    material changes through the product or required communications.

    Contact: Ashcroft AI, via the in-product support surface at ashcroftai.com.