Draft. This page is waiting for a final check by a lawyer before Ask Ravens launches. The facts in it describe how Ask Ravens works today.
Privacy notice
Ask Ravens is run by Primus Tech Services Limited, a company registered in England and Wales (company number 14845699), trading as Ask Ravens. Registered office: [registered office address to be added]. Contact: [contact email to be added].
We're the controller of the personal data described here. Our registration number with the Information Commissioner's Office is [ICO registration number to be added].
The short version
- We never sell your data, never share it for advertising, and never train AI models on your chats.
- Your questions go to AI models to be answered. Unless you sign in and save chats, we don't keep them.
- You can download or delete everything we hold about you from your account.
What we collect, why, and our lawful basis
Your questions and the answers
Your question, and the earlier messages in that chat, go through our safety check and to the AI models listed below so they can answer. We don't store them. One exception: when you ask a single question with no earlier messages and no memory notes, we keep the checked answer for up to 7 days (6 hours if it used a web search), filed under a one-way fingerprint of the question, so the same question asked again is answered straight away. The question itself isn't kept. Pro answers, and answers shaped by your memory notes, are never kept this way. Lawful basis: providing the service you asked for (contract).
Web search
If an answer needs up-to-date facts, a short search query written from your question is sent to Wikipedia. Lawful basis: contract.
Your account
If you sign in: your email address, the date you joined, your plan, and for Pro your Stripe customer and subscription numbers. We also keep when you last signed in and used Ask Ravens, any extra credits we give you, and, if it's ever needed, a suspension or a note about the account by the people who run Ask Ravens. All of it is in your data download. Sign-in codes are kept only as a one-way fingerprint for 10 minutes, and sessions as a fingerprint for 30 days. Lawful basis: contract.
Saved chats
Signed-in chats are encrypted before they're stored, so they can be on every device you use. They're kept until you delete them or your account. Lawful basis: contract.
Memory notes, reminders and check-ins
Memory is off until you switch it on. Then the ravens keep short notes you ask them to keep, encrypted, and use them only to shape your own answers. You choose what goes in. If you add something sensitive, such as a health condition, you're giving us your explicit consent to use it this way, and you can take it back at any time: switching memory off deletes every note. Reminder text is encrypted; the times are kept as they are so we can send them. Lawful basis: your consent (explicit consent for any special category data) for notes, and contract for reminders.
Voice
If you choose "Start now", your recording is sent to Cloudflare's AI service to be turned into text and is then thrown away. Answers read aloud are made the same way. If you choose to keep your voice on your device, the speech models are downloaded once from jsDelivr and Hugging Face (who see your internet address, as any website would) and your voice never leaves your device. Lawful basis: contract.
Pages you build
Pages made in Build mode are stored for 30 days under a random link. Anyone with the link can open them, so don't put anyone's personal details on a page unless they're happy for them to be public. Lawful basis: contract.
If you use Ravens Studio, the app builder, your description of the app, the plan and the app's code go to the AI models that plan, write and review it. Your apps, and anything saved in their previews, are kept in your own browser, not on our servers. We keep a count of the credits you've used and a record of each step for two days, and a list of steps charged and refunded for 30 days, against your account or your internet address.
If you press Edit and publish on a website, its words and design go from your browser to Lupaan's editor, inside the link itself, so we don't store a copy for the hand-over. Lupaan is our own website builder, run by the same company. What Lupaan keeps after that is set out in Lupaan's own privacy notice.
My Raven
If you hatch a raven, we keep your profile (the name, web address, trade, town and line about you that you give us). For each deal we keep the terms you write (what, the price, what you promise and by when), when it was agreed, sent and answered, any courier and tracking number, and the notes you and the buyer add. The public profile shows counts only, never the deals or who bought. Lawful basis: contract.
Buyers don't need an account. When a buyer opens a deal link, agrees the terms or answers, we keep one-way codes made from their device and internet address, which can't be turned back into either, and any note they add. We keep the same kind of codes for the seller's devices for 90 days. We use them only to stop people answering their own deals and to settle disputes. Lawful basis: our legitimate interest in keeping profiles honest for buyers.
Ratings
When you give a thumb up or down, we keep the run number, your rating and reason, and a one-way code made from your account or internet address that can't be turned back into either. We use ratings to learn which models and designs work best. Kept for up to a year. Lawful basis: our legitimate interest in improving Ask Ravens.
The scoreboard and safety counts
For each answer we record which model agreed with the referee, the kind of question (such as law or maths) and how long it took. When the safety check stops something, we record only the stage and the type of harm. None of this includes what was asked or who asked it. Lawful basis: legitimate interests (improving and protecting the service).
Limits and abuse protection
Daily limits are counted against your internet address or account and kept for two days. Repeated requests the ravens won't help with are counted against your internet address for the rest of the day. Cloudflare also keeps short-lived technical logs of requests, such as internet address and time, to run and protect the service. Lawful basis: legitimate interests (keeping Ask Ravens available and safe).
Reports
If you report something, we keep what you send, including the question and answer if you choose to include them, so a person can check it. Kept for up to a year after the report is closed. Lawful basis: legal obligation (the Online Safety Act 2023) and legitimate interests.
Payments
Stripe takes card payments for Pro. We never see or store your card details.
Who handles your data
These companies run parts of Ask Ravens for us. We choose providers whose terms say they don't use business data to train their models, and we check before switching any new one on.
- Cloudflare: hosting, the free AI models, the safety check, voice and storage. Data is processed in the UK, the EU and the United States; our database is in Western Europe.
- Wikimedia Foundation (Wikipedia and Wikidata): looking up settled facts and who holds an office (only the search words are sent). United States.
- MET Norway: weather forecasts (only the place's map position is sent; with no place given, the approximate city from your connection is used for that one lookup and not kept). Norway.
- A free exchange-rate service (served by jsDelivr and Cloudflare): daily exchange rates (only the currency is sent). Worldwide.
- The GDELT Project: recent news headlines (only the search words are sent). United States.
- Resend: sign-in codes and reminder emails. United States.
- jsDelivr and Hugging Face: the speech models, only if you choose to keep your voice on your device. They see your internet address when the models download.
We'll share data with the police, a court or a regulator only where the law requires it.
Data outside the UK
Some of these providers process data in the United States. Where data leaves the UK, we rely on UK adequacy regulations (including the UK extension to the EU-US Data Privacy Framework) or the Information Commissioner's International Data Transfer Agreement or Addendum, with extra checks where needed.
How long we keep things
- Questions and answers: not kept, apart from the 7-day answer memory described above.
- Saved chats, memory notes and reminders: until you delete them or your account.
- Your account: until you delete it.
- Build pages: 30 days.
- My Raven profiles and deals: until the seller deletes their account. Seller device codes: 90 days.
- Ratings: up to a year.
- Daily limit counters: two days. Sessions: 30 days.
- Reports: up to a year after they're closed.
- Scoreboard and safety counts: kept, as they contain no personal data.
Your rights
You can ask to see your data, correct it, delete it, take a copy, restrict or object to how we use it, and withdraw consent at any time. Most of this you can do yourself: Account, then Download my data or Delete my account, and Memory and reminders for notes. For anything else, email [contact email to be added] and we'll reply within one month.
If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Age
Ask Ravens is for people aged 18 and over. If we learn that someone under 18 has an account, we'll delete it.
Cookies and storage
We use one cookie, ar_session, to keep you signed in. It's strictly necessary, so it doesn't need consent. Your browser also keeps your chats, settings and voice choice in its own storage on your device. We use no advertising cookies and no analytics that track you.
Automated decisions
The ravens decide which models answer and when to check an answer more carefully, but nothing about you is decided automatically in a way that has a legal or similarly serious effect on you.
Changes
If we change this notice we'll update the date at the top, and tell you in the app if the change is significant.