PRIVACY POLICY

Last updated July 25, 2026

This Privacy Policy explains how AskCSV ("AskCSV," "we," "us," or "our") handles information when you use our website at https://askcsv.com and the AskCSV app (the "Services"). Questions? Contact us at help@askcsv.com.

SUMMARY OF KEY POINTS

• Analysis does not require an account. You can use the Free analysis experience without signing in. Google sign-in is required only when you choose to purchase or manage Pro.
• Your analysis content stays on your device. CSV or TSV files, pasted data, questions, generated SQL, query results, charts, and conversations are processed in your browser by the on-device AI model and DuckDB. AskCSV servers do not receive this content.
• Your local work remains in this browser until you delete it. Saved datasets and conversations use browser storage (IndexedDB). You can remove them from Settings or by clearing browser data.
• Pro uses limited account and billing records. If you sign in, we store the Google account details needed for authentication and the Stripe customer, subscription, price, and entitlement status needed to provide Pro. Stripe processes payment details; AskCSV does not receive your full card number.
• Product analytics is anonymous and cookieless. We measure aggregate, pathname-only usage with a privacy-hardened analytics tool that stores nothing on your device (no cookies and no persistent identifier) and never receives personal information or your CSV content. It honors browser Do Not Track and Global Privacy Control signals. Optional Google Analytics and Google AdSense are separate and load only after you enable their category from Privacy choices in Settings.
• We do not sell your personal information. Files may contain sensitive information, but because analysis content stays in your browser, we do not receive that content.

1. INFORMATION PROCESSED ON YOUR DEVICE

Analysis content. Files you open or paste, questions you ask, generated SQL, query results, charts, and conversation history are processed locally in your browser. They are not sent to AskCSV servers or to a cloud AI provider.

Local storage. AskCSV uses browser storage for saved datasets and conversations, Free usage counters, display and performance preferences, consent choices, and the downloaded on-device AI model. This information remains under the browser profile you use until you delete it or clear browser storage.

App and model downloads. The website, on-device AI model, DuckDB, fonts, and other app assets must be downloaded over the network. Downloading those assets does not send your CSV or analysis content to us.

2. ACCOUNT AND BILLING INFORMATION

Google sign-in. If you choose Pro, Google OAuth provides the name, email address, profile image, and account identifier needed to create and authenticate your AskCSV account. We also keep the authentication session and account records needed to keep you signed in. Signing in does not upload or sync your locally stored analysis content.

Stripe billing. Stripe processes Checkout, payment methods, recurring charges, and the Customer Portal. AskCSV stores limited billing references and status, such as Stripe customer and subscription references, the subscribed price, and the current entitlement period. We do not receive or store your full card number.

Technical and security data. Our hosting and security providers may process standard request information such as IP address, browser type, device characteristics, referring page, requested pathname, timestamps, and security logs. We use this information to deliver and protect the Services.

3. HOW WE USE INFORMATION

We use the limited information described above to:

• provide and secure the website;
• authenticate Pro users and maintain subscription access;
• process and support billing through Stripe;
• remember local app settings and saved work in your browser;
• understand aggregate, anonymous product usage through cookieless analytics that stores nothing on your device; and
• display advertising on eligible Free surfaces when ads consent is enabled.

We do not use your CSV, questions, SQL, results, charts, or conversations for model training because AskCSV does not receive that content.

4. COOKIES AND SIMILAR TECHNOLOGIES

Essential storage includes the authentication session for signed-in users and local browser records required for app preferences, usage limits, consent, saved work, and model caching.

Anonymous product analytics (no cookies). We use a privacy-hardened analytics service (PostHog, US region) to understand aggregate product usage. It is configured to store nothing on your device — no cookies and no persistent identifier — and to run fully anonymously, with autocapture and session recording disabled. Because it stores no information on your device and does not collect personal information, it operates without a separate consent step. It honors browser Do Not Track and Global Privacy Control signals, which turn it off automatically.

AskCSV's product analytics sends pathname-only page views and allowlisted funnel events with fixed categories or buckets. We do not intentionally send URL search parameters or hashes, filenames, file contents, questions, SQL, column names, chart data, names, email addresses, or OAuth or Stripe identifiers in analytics events.

Google Analytics and Google AdSense are non-essential and controlled separately. Both are off until you enable their category, and each script loads only when enabled. You can change or withdraw either choice at any time from Privacy choices. Withdrawing ads consent may require a page reload to remove an already loaded advertising script.

5. THIRD-PARTY SERVICES

Google OAuth. Google processes sign-in when you choose to create or access a Pro account. See Google's privacy policy at https://policies.google.com/privacy.

Stripe. Stripe processes payment details, recurring subscription billing, Checkout, and the Customer Portal. See Stripe's privacy policy at https://stripe.com/privacy.

PostHog (product analytics). We use PostHog Cloud (US region) for anonymous, cookieless product analytics as described in Cookies and Similar Technologies. PostHog processes only the pathname-only page views and allowlisted funnel events we send, with no cookies or persistent device identifier. See https://posthog.com/privacy.

Google Analytics. When you enable analytics, Google Analytics helps us understand aggregate website and funnel usage. See https://policies.google.com/privacy and the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

Google AdSense. When you enable ads and advertising is configured, Google and its partners may use cookies or similar technologies to serve and measure ads. Advertising may depend on your region and Google settings. See https://policies.google.com/technologies/ads and manage Google ad settings at https://adssettings.google.com.

Our hosting, content-delivery, database, and security providers process the limited technical, account, or subscription information needed to operate the Services. Their own terms and privacy policies apply to their processing.

6. RETENTION AND DELETION

Local analysis content. Saved files and conversations remain in the current browser profile until you delete individual datasets, choose Delete all data in Settings, or clear browser storage. The downloaded AI model is kept separately and can also be deleted from Settings.

Account and subscription records. We retain account, authentication, and subscription records for as long as needed to provide Pro, maintain security, resolve billing issues, and meet applicable legal obligations. Stripe retains payment and transaction information according to its own policies and legal obligations.

To ask about deletion of server-side account information, contact help@askcsv.com. Deleting local browser data does not cancel a Pro subscription, and canceling Pro does not automatically delete local browser data.

7. YOUR CHOICES AND RIGHTS

• Use Free without an account. Analysis does not require Google sign-in.
• Delete local data. Use Settings to delete saved datasets and conversations, reset the app, or remove the downloaded model.
• Manage privacy choices. Enable, disable, or withdraw optional Google Analytics and ads from Privacy choices. Anonymous product analytics is cookieless and honors browser Do Not Track / Global Privacy Control signals, which turn it off automatically.
• Manage Pro billing. Signed-in Pro users can open the Stripe Customer Portal from the account menu.
• Regional rights. Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal information. Contact help@askcsv.com to make a request about information held by AskCSV. For data held by Google or Stripe, their request processes also apply.

8. CHILDREN

The Services are not directed to children under 13, and we do not knowingly collect personal information from children.

9. UPDATES TO THIS NOTICE

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above.

10. CONTACT

Questions about this notice? Email us at help@askcsv.com.