1. Who we are and scope
Effective date and last updated: September 1, 2026.
This Privacy Policy describes how Fiftify Inc. (“Fiftify”, “we”, “us”), registered at 1111B S Governors Ave STE 23190, Dover, DE 19904, United States, collects, uses and shares personal information when you visit askority.com, use the Askority platform, contact us, attend our demos or receive our communications (the “Services”). Askority is a product operated by Fiftify Inc.. Fiftify is the data controller for this processing.
This policy does not cover personal information we process on behalf of customers inside the platform, for example Google Analytics 4 data a customer connects, or names of a customer’s team members. In that context the customer is the controller and our Data Processing Agreement applies. If you are an end user of a customer’s website, please contact that customer.
Where the GDPR or UK GDPR requires us to appoint a representative in the EEA or the UK, we will publish the representative’s contact details on this page; until then, requests from the EEA and UK can be sent to [email protected].
2. Personal information we collect
Information you provide: name, work email, company, role, account credentials or authentication information, billing address and any details you enter in forms, the contact form, chat or a demo booking. Payment information is collected directly by our payment processor; we keep only the card type, last four digits and billing address. Communications: the content of emails, chat messages and support requests.
Information collected automatically: IP address and approximate location derived from the IP address, device and browser type, operating system, pages viewed, referrer, dates and times of visits, features used in the platform, and diagnostic logs. Cookies and similar technologies are described in our Cookie Policy.
Information from third parties: business contact information from your organisation, business partners, service providers, publicly available sources and, where permitted by law, other sources, used to respond to enquiries about the Services and to contact businesses that may be interested in them. If you connect a third-party account (such as Google Analytics 4 or Google Merchant Center) we access only the properties and scopes you authorise, for the purposes described in the Service. We do not access your Google account password, and you can revoke the connection at any time in your Google account or the relevant Google service settings.
3. How we use personal information
To create and manage your account and provide the Services; to process payments and prevent fraud; to respond to support and demo requests; to send service notices such as alerts, invoices and changes to terms; with your consent where required, to send product news you can unsubscribe from at any time; to understand how the Services are used and improve them; to secure the Services and enforce our Terms; and to comply with legal obligations. We do not sell personal information, we do not use it for third-party targeted advertising, and we do not use personal information or Customer Data to train general-purpose AI models. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
4. Legal bases (EEA, UK and Switzerland)
Where the GDPR, the UK GDPR or the Swiss FADP applies, we rely on: performance of a contract for account, billing and support data; our legitimate interests in securing and improving the Services, preventing fraud and communicating with business customers, balanced against your rights; your consent for optional cookies and marketing emails, which you can withdraw at any time; and legal obligations for tax, accounting and compliance records.
5. AI providers
To perform the analysis you request, the Service sends prompts, brand and competitor names, website URLs, configuration data and other information necessary for the requested analysis to third-party AI providers (currently OpenAI, Google, Microsoft, Perplexity and Anthropic) and receives their responses. Those providers process such information under their own terms and privacy policies and, where applicable, under contractual arrangements with us. We configure these connections so that data sent through them is not used to train the providers’ models where the provider offers that option.
6. How we share personal information
With subprocessors that host, support and deliver the Services (cloud hosting, payments, transactional email, support chat, analytics, error monitoring and the AI providers described above), listed on our Subprocessors page and subject to contractual data protection obligations; with professional advisers such as accountants and lawyers; with authorities where required by law, to protect our rights or the safety of others, or to investigate fraud; and with a successor in connection with a merger, acquisition or sale of assets, with notice to you. We may share aggregated or de-identified data that cannot reasonably identify you.
7. Cookies and tracking
We use strictly necessary cookies for login and security and, with your consent where required by law, functional cookies, analytics and support chat technologies. We do not use advertising or cross-site tracking cookies. We honour the Global Privacy Control signal where required by law. Details, including how to change your choices, are in our Cookie Policy.
8. Retention
Account and billing data are kept while your account is active and for 30 days after cancellation for export, then deleted within 90 days unless we must keep them for as long as applicable tax, accounting, legal or dispute-resolution requirements demand (for example, certain billing records may be retained for up to seven years). Support and chat information is generally retained for up to 24 months, unless a longer period is required for legal, security or dispute-resolution purposes. Website usage logs are kept for 12 months. Marketing contact data is kept until you unsubscribe or after 24 months of inactivity.
9. Security
We protect personal information with measures we have implemented including encryption in transit and at rest, role-based access controls, logging and monitoring, regular backups, vulnerability management and staff confidentiality obligations; our security documentation is available on request. No method of transmission or storage is completely secure; if a breach affects your personal information we will notify you and any regulator as the law requires.
10. International transfers
We are based in the United States and our Services are hosted in the United States and the European Union. If you use the Services from the EEA, the UK or Switzerland, your personal information is transferred to the United States. We use appropriate safeguards for such transfers, including the European Commission’s Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum and the adaptations required under Swiss law, or another lawful transfer mechanism, together with any transfer risk assessment the law requires. You can request a copy of the relevant safeguards at [email protected].
11. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, restrict its processing, receive a copy in a portable format, and withdraw consent at any time without affecting earlier processing. You have the right to object to processing based on our legitimate interests and, at any time, to direct marketing. You also have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects; as stated above, we do not make such decisions. To exercise your rights write to [email protected]; we will verify your identity and respond within the time required by law. You can also complain to your local data protection authority, including the authority in your country of residence in the EEA.
12. California privacy rights
If you are a California resident, the CCPA/CPRA gives you the following rights: the right to know the categories and specific pieces of personal information we collect, the categories of sources, the business purposes, and the categories of third parties with whom we share it (all described in this policy); the right to delete; the right to correct inaccurate information; the right to opt out of the sale or sharing of personal information, which does not apply because we do not sell or share personal information for cross-context behavioural advertising; the right to limit the use of sensitive personal information, which does not apply because we do not use or disclose sensitive personal information for purposes that trigger that right; and the right not to be discriminated against for exercising these rights. You may submit a request by emailing [email protected] or through our privacy request form at askority.com/contact, and you may use an authorised agent. We will verify your request using information associated with your account or your prior interactions with us. If we deny a request, you may appeal by replying to our decision. We honour Global Privacy Control signals as a request to opt out. Residents of other US states with comparable privacy laws may exercise equivalent rights in the same way.
13. Children
The Services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect personal information from children; if you believe a child has provided it, contact us and we will delete it.
14. Third-party links
The Services may link to websites and services we do not control, including the AI engines we analyse. Their privacy practices are governed by their own policies.
15. Changes to this policy
We may update this policy. We will post the new version here with a new date and, for material changes, notify account owners by email or in the Service before the changes take effect.
16. Contact
Fiftify Inc.
1111B S Governors Ave STE 23190, Dover, DE 19904, United States
Email: [email protected]