Privacy Policy

Last updated: May 12, 2026

This Privacy Policy explains how AskSuls collects, uses, and shares information when you use our websites and services.

AskSuls is operated by ACD Management Consulting DMCC ("ACD", "AskSuls", "we", "us", and "our").

If you use AskSuls under a signed agreement, order form, data-processing addendum, or enterprise contract, that agreement may contain additional or different privacy and data-processing terms.

Questions: contact@asksuls.com

Sensitive and confidential information

AskSuls is intended for business research and benchmarking workflows. Unless you have a written agreement with AskSuls that says otherwise, do not submit information that you are not authorized to process through the service. This includes regulated personal data, special-category or sensitive personal data, protected health information, payment-card data, confidential third-party materials, trade secrets, or information subject to contractual restrictions.

You are responsible for making sure that the information you submit can lawfully and contractually be processed through AskSuls.

Information we collect

We may collect:

Early access information, such as name, email address, company, role, website, and the workflow you want AskSuls to help with.
Account information, such as name, email address, organization, role, and authentication identifiers.
Service content you submit, such as queries, scope answers, uploaded references, notes, prompts, and review edits.
Generated work product, such as research plans, evidence summaries, source trails, decision narratives, exports, and review history.
Billing and subscription metadata handled through a payment processor. We do not store full payment card numbers.
Usage, device, and log data, such as pages viewed, product actions, IP-derived location, browser and device details, request metadata, error logs, and performance signals.
Communications, such as emails, support requests, and security reports.

How we use information

We use information to:

Review and respond to early access requests.
Provide and operate the service.
Authenticate users and manage access.
Generate, store, recover, and help review research work product.
Process payments, credits, subscriptions, and billing events.
Maintain reliability, security, abuse prevention, and debugging.
Provide support and communicate about the service.
Improve the product using aggregated or de-identified analytics where practical.
Comply with legal obligations and protect rights, safety, and service integrity.

Legal basis (where applicable)

Where European or United Kingdom data protection law applies, we rely on the following legal bases to process personal information:

Performance of a contract, to provide the service to you and your organization.
Legitimate interests, to maintain reliability, security, abuse prevention, billing integrity, and product improvement, where those interests are not overridden by your rights.
Consent, where required, such as for certain marketing communications or non-essential cookies.
Legal obligation, where required to comply with applicable law.

Service providers

AskSuls uses third-party service providers to operate, secure, support, and improve the service. These providers may support:

Hosting, deployment, and web infrastructure.
Authentication, account management, and access control.
Data storage, backup, recovery, and reliability.
Email delivery, customer relationship management, and support.
Analytics, performance measurement, security, abuse prevention, and debugging.
Payment processing, checkout, subscriptions, billing, and account events.
AI model inference and related processing needed to provide the service.

These providers process information as needed to provide services to AskSuls and are subject to their own contractual, security, and policy commitments.

For enterprise customers or vendor reviews, we can provide additional provider and data-processing information through an appropriate review process or written agreement, including a data-processing addendum where required.

AI provider processing

Some customer content and generated context may be sent to AI model providers so the service can generate research plans, evidence summaries, narratives, and related work product.

We design prompts and workflow payloads to avoid unnecessary exposure where practical, but AskSuls depends on model inference to perform its core functions.

AskSuls does not train its own foundation models on customer content. Where available, we use provider API or business-product paths and do not intentionally opt customer content into provider model training. Provider data-use, logging, abuse-monitoring, and retention terms can vary by provider, model, account configuration, and product tier. For enterprise use, approved providers, retention controls, data-processing terms, and model-training restrictions should be specified in a written agreement.

How we share information

We may share information:

With service providers that help us operate the product.
With legal, compliance, or safety recipients when required by law or needed to protect rights and service integrity.
With a successor entity if AskSuls is involved in a merger, acquisition, financing, reorganization, or asset sale.
With your direction, such as when you export, share, or connect an integration.

We do not sell personal information.

Cookies and analytics

We may use cookies and similar technologies for essential functionality, authentication, security, analytics, and performance measurement.

You can control cookies through your browser settings, but some product features may not work without essential cookies or similar technologies.

Retention

We retain information as long as needed to provide the service, maintain review history, meet security and billing requirements, comply with legal obligations, and resolve disputes.

If you request deletion, we will take reasonable steps to delete or de-identify information unless retention is needed for legitimate security, legal, billing, or operational reasons.

Our current retention posture is:

Information type	Typical retention posture
Early access requests	Kept while we evaluate, respond to, and manage launch/pilot demand.
Account and organization data	Kept while the account is active and for a reasonable period afterward for security, billing, and support.
Research jobs, inputs, generated work product, source trails, and review history	Kept while needed to provide the workspace, preserve reviewability, support recovery, and maintain user-requested records.
Logs, security events, and operational metadata	Kept for debugging, abuse prevention, reliability, and security review.
Billing records	Kept as required for accounting, tax, payment, dispute, and compliance purposes.
Deleted accounts or deletion requests	Deleted or de-identified where practical, subject to legal, billing, security, backup, and dispute-resolution needs.

Your choices

Depending on where you live, including in the UAE, EU/UK, United States, or other jurisdictions, you may have rights to access, correct, export, delete, object to, or restrict the use of your personal information.

To make a request, contact contact@asksuls.com.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with a data protection authority, you also have the right to lodge a complaint with your local supervisory authority.

California residents

If you are a California resident, this section applies to you in addition to the rest of this Privacy Policy.

We collect the categories of information described under "Information we collect" for the purposes described under "How we use information." We do not sell personal information and do not share personal information for cross-context behavioral advertising.

You have the right to know, access, correct, delete, and limit the use and disclosure of your personal information, subject to verification and applicable legal exceptions. To exercise these rights, contact contact@asksuls.com. We will not discriminate against you for exercising these rights.

International processing

We may process and store information in countries other than where you live. Those countries may have different data protection laws.

Children

The service is not intended for children under 16, or the minimum age set by applicable law in your jurisdiction, and we do not knowingly collect personal information from children under that age.

Changes

We may update this policy. If we make material changes, we will update the Last updated date and take reasonable steps to notify users when appropriate.