Privacy Policy

1. What we collect

When you use ASK DM, we collect:

• Account info: your email address, created automatically when you complete a purchase or sign in with Google.
• Payment info: processed entirely by Stripe — we never see or store your card number. We keep only the purchase record (what you bought, when, which visa category).
• Your case narrative: the personal story/background text you write into the case builder. It is used only to restate facts you already provided, in the third person, and to organize your uploaded files into a petition package — the system does not add facts you didn't write or make legal recommendations.
• Google Drive access: when you paste a Drive folder link, our system reads the files in that folder to match them against your narrative. This happens live, at the time you submit — we do not make a permanent copy of your files.
• Usage data: which course modules you've watched, whether you've used the AI case builder, and how many attempts remain — used to run our 7-day refund policy correctly and to send you relevant reminder emails.

2. What we don't do

• We don't sell your data to anyone.
• We don't keep a permanent copy of your Google Drive documents.
• We don't use your case narrative or documents to train AI models.
• We don't share your information with immigration authorities, employers, or any third party, except the service providers listed below who are strictly necessary to operate the platform.

3. Service providers we use

To run ASK DM, parts of your data pass through:

• Stripe — payment processing.
• Supabase — account login and storing your purchase/access records.
• Google (Drive API) — reading your shared folder at the moment you submit your case, and Google Sign-In if you choose that login method.
• Anthropic / Google (AI models) — processing your narrative and document text to generate your case package.
• Klaviyo — sending you course/product emails (you can unsubscribe from marketing emails any time; account-essential emails, like your login link, are not marketing).

Each of these providers processes data only as needed to perform their specific function for ASK DM — they don't get access to more than what's required.

4. How long we keep things

• Your account and purchase record: as long as your account exists (12-month access window, then it simply expires — see Terms).
• Your Google Drive documents: not retained by us at all — read live, not stored.
• Your case narrative: stored so you can revisit and re-run your case builder attempts; deleted on request (email us).

5. Your rights

You can ask us to delete your account and associated data at any time by emailing contact@askdm.com. If you're in the EU/UK or California, you have additional rights under GDPR/CCPA (access, correction, deletion, portability) — the same email works for any of these requests.

6. Security

Payment data never touches our servers (handled entirely by Stripe). Account access uses Supabase's authentication system with encrypted sessions. We use HTTPS everywhere.

7. Changes to this policy

If we materially change how we handle your data, we'll update this page and note the new date at the top. Continued use of ASK DM after a change means you accept the update.

8. Contact

Questions about this policy or your data: contact@askdm.com