AsAsked Privacy Policy

1. What AsAsked does

AsAsked creates a reviewable list of requirements from a user's request, checks a completed AI response against those requirements, shows evidence or structured check results, and can prepare a focused follow-up draft. It does not establish factual truth, safety, legality, medical or financial correctness, professional correctness, or overall answer quality.

The initial public offer is limited to people who are at least 18 years old, are located in the United States, and can use the English-language product and policies. AsAsked is not directed to children.

2. Information handled on the device

To provide its user-facing features, AsAsked may process:

• submitted user messages and completed assistant responses visible in a supported ChatGPT conversation;
• ChatGPT conversation, message, and turn identifiers used to keep local ledgers and revisions separate;
• prompt and response snapshots, derived content hashes, extracted requirements, evidence excerpts, structured checks, verdicts, corrections, and prepared drafts;
• extension settings, including history, retention, and ChatGPT-enabled choices;
• a local monthly usage counter and countable-audit identities used to apply the Free allowance;
• request and response text deliberately pasted into the memory-only manual checker;
• response text deliberately selected for the one-time Use selection flow; and
• a structural troubleshooting report generated only when the user requests a download.

Sensitive information may appear inside a user's chat content. AsAsked does not ask for those categories as profile fields; it handles them only when they are part of the supported page content the user chooses to check.

3. How information is used

Information handled through browser permissions is used only to provide and improve AsAsked's disclosed purpose: tracing instructions, checking responses, restoring or exporting local history, applying the local Free allowance, preparing user-requested drafts, and diagnosing whether the supported page adapter can recognize the current page structure. Licensing data is used only to activate, refresh, remove, and support a Personal entitlement.

AsAsked does not use this information for advertising, retargeting, unrelated profiling, creditworthiness, lending, or sale.

4. Network transfers and third parties

The paid launch candidate does not transmit conversation content, requirements, evidence, verdicts, drafts, settings, or structural reports to Vellumstead Labs, Lemon Squeezy, the licensing broker, or an additional AI provider. It downloads no remote executable code or visual assets.

The existing ChatGPT page and service process the user's conversation under the user's separate relationship with ChatGPT. Text a user chooses to submit after an AsAsked draft is inserted or copied is then handled by ChatGPT. AsAsked never submits that text itself.

If a user chooses to purchase or manage Personal, Lemon Squeezy handles the checkout, billing details, payment, tax, order email, and customer portal under its own policies. The AsAsked website does not receive card details and currently uses no behavioral analytics.

5. Browser permissions

• Storage: saves local settings and reset coordination. Conversation ledgers and trusted Personal licensing records use extension-origin IndexedDB.
• Access to https://chatgpt.com/*: observes supported visible turns, places AsAsked controls beside completed responses, and inserts a draft into an empty active composer only after a user action.
• Optional access to https://license.vellumsteadlabs.com/*: requested from a trusted extension page only after a visible user choice for Personal licensing or content-free compatibility status. Licensing uses the reviewed broker contract. Compatibility status uses only the fixed GET /v1/compatibility endpoint.

AsAsked does not request all-sites access, browsing-history access, clipboard-read, downloads, tabs, cookies, authentication, or browser-sync storage permission.

6. Local history, retention, and deletion

Saved local conversation history is off by default. It remains off unless the user explicitly enables Keep local conversation history in AsAsked settings under History and site access. A Personal entitlement makes saved history available; it does not count as consent. When history is enabled, the default retention setting makes an entire saved conversation eligible for deletion after 30 days without an update. Users can instead choose 7 days, 90 days, or retention until manual deletion. Eligible conversations are removed when the extension background process next runs.

Turning history off prevents new traces from being retained for reload restoration; it does not erase traces already saved. Temporary data can remain in an open page to display the current check.

Delete all local data clears AsAsked conversation data, settings, reusable local rules, local reset state, outstanding one-time selected-response transfers, the local usage counter, local entitlement and refresh records, cached signed compatibility status, automatic-checking session registrations, any pending remote-release task, and currently mounted AsAsked views. It does not contact the licensing service or release an installation, so licensed users should use Remove license from this browser first when possible. It does not delete ChatGPT conversations, downloaded exports, downloaded structural reports, clipboard contents, or Lemon Squeezy order records. Chrome-managed optional site access is a browser permission rather than local AsAsked data, so it remains granted; when that access exists, AsAsked may request fresh content-free compatibility status for an open supported tab or after the next start. Deletion resets settings to their defaults, so saved history remains off until the user explicitly enables it again.

7. Manual checks, selection transfer, and diagnostics

Text pasted into the manual checker remains in that page's memory and is discarded when the page is refreshed or closed. A response selected on ChatGPT can be placed in a consume-once browser-session record for at most five minutes. The selected text is not placed in the URL or persistent history and is removed on first read.

A structural report is created only when the user selects Download structural report. It contains categorical page-structure counts, bounded timing and activity states, allowlisted health codes, and the AsAsked version. It excludes conversation text and hashes, evidence, drafts, page URLs and titles, selectors, DOM paths and attributes, screenshots, cookies, storage values, account identifiers, and raw exceptions. AsAsked does not upload the report.

Each supported ChatGPT document also has a content-free local circuit breaker. If AsAsked cannot recognize the page safely, it hides stale results, stops automatic checking for that document, preserves saved local data, and directs the user to Check copied text. This built-in protection works without optional access to the licensing service.

If the user separately enables content-free compatibility status, AsAsked may make a credentials-omitted, referrer-free GET /v1/compatibility request. The request carries no conversation, page, account, browser, license, or installation identifier. A valid signed response may only place affected extension versions in manual-only or disabled mode for a bounded time. It cannot carry selectors, executable code, URLs, arbitrary user-facing copy, or an instruction to enable capture. Selector fixes still require a higher Chrome Web Store version.

8. Export and user access

Users can export saved AsAsked history as readable JSON. The export can contain saved turns, requirements, evaluations, corrections, and prepared drafts; it does not contain extension settings. Exported files and clipboard copies are outside AsAsked storage and must be deleted by the user separately.

9. Personal licensing data

When the paid candidate launches, AsAsked will contact the Vellumstead licensing broker only after a user starts activation, refresh, restore, or removal. An activation request contains the purchase key, a random installation identifier, product and operation versions, and content-free request metadata. The raw key is cleared from the extension after the request.

The extension retains only an opaque refresh handle, signed entitlement receipt, random installation identifier, key hint, operation version, and validation timing. The broker may retain opaque entitlement and installation identifiers, product and variant, plan status and paid-through times, an encrypted provider credential where required, hashed refresh handles and key fingerprints, a key hint, content-free lifecycle or error codes, and webhook event dispositions. Hosting services necessarily receive network metadata such as an IP address and request time.

The broker rejects conversation text, requirements, evidence, drafts, ChatGPT identity, page URLs, and browsing data. Licensing records are used only for access, fraud and rate-limit controls, lifecycle processing, and support. Removing a license clears local Personal access immediately. If remote deactivation cannot finish while offline, the provider-side activation may remain until a later retry or support reset.

Active entitlement and active installation records are retained while each remains active. Terminal entitlement graphs and independently deactivated installations are retained for 90 days after their effective terminal or deactivation time. Content-free activation, refresh, and deactivation operation-idempotency records are retained for 90 days from database creation. Webhook replay/idempotency records are retained for 90 days from database receipt. Operational and rate-limit logs, including unavoidable network metadata, are retained for no more than 30 days. When licensing records are deleted, copies age out of encrypted backups within 35 days. A record may be retained longer only under a bounded hold for a dispute, fraud investigation, tax obligation, or other legal requirement. Each hold has an explicit expiry, may be renewed only while its basis remains, and has a maximum term of 366 days.

Lemon Squeezy independently retains order, payment, tax, and refund records under its own policies and legal obligations. Local conversation data remains governed by the on-device controls in section 6 rather than the broker retention periods above.

10. Chrome Web Store Limited Use

AsAsked's use of information received through browser permissions is limited to providing and improving the extension's disclosed, user-facing single purpose. The information is not sold or transferred for personalized advertising, retargeting, unrelated profiling, creditworthiness, lending, or any purpose unrelated to the extension's features. Chat content received through browser permissions is not transferred to the developer, licensing broker, billing provider, or another AI provider.

11. Security and future changes

Keeping content local reduces exposure but does not make browser storage immune from device compromise, malicious software, other people with access to the browser profile, or vulnerabilities in Chrome or the host site. Users should protect their device and avoid placing unnecessary sensitive information in AI conversations.

Any future remote semantic-checking feature will remain off by default and will require a separate prominent disclosure and explicit choice explaining the minimum content sent, recipient, purpose, and retention. Material data-handling changes will be disclosed before the changed handling begins, and this policy's date will change.

12. Contact

Publisher: Vellumstead Labs LLC
Privacy and support contact: [email protected]

The public business mailing address is ready for publication but has not yet been inserted on this prelaunch page. It will be added before checkout opens.