New Askly social media support agent is now live. Included in your plan.

Sign in Try free now

Legal

Privacy policy

How Askly OÜ collects, uses and protects personal data, and how you can use your rights. Questions? Email info@askly.me.

Last updated 30 September 2026

Introduction

This Privacy Policy applies to the Askly chat widget, the AI voice agent and the automated customer support web service (together, the “service”), and to our website meetaskly.com. They are owned and operated by Askly OÜ.

It explains how we collect, use, disclose and protect personal data when you use the service or visit our website. By using the service, you acknowledge that your personal data is processed as described here.

Askly OÜ acts in two roles:

  • Controller for our own marketing and website data.
  • Processor for our clients’ end-user data, meaning the personal data of their prospective and existing customers. We process this data only on the documented instructions of the client, who is the controller.

To provide parts of the service, we use trusted sub-processors (see “Sub-processors and data location”).

Askly processes the personal data of our clients, our clients’ email lists and the users of our website in line with the General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) and all applicable Estonian and European laws on the protection of personal data.

Controller and contact details

  • Company: Askly OÜ, headquartered in Tallinn, Estonia
  • Registry code: 14507205
  • Registered address: Tartu mnt 82, 10112 Tallinn, Estonia
  • Email for privacy matters: info@askly.me

If you have questions about this Privacy Policy, or want us to correct or delete the personal data we hold about you, contact us at the email address above.

What we do

We provide our clients, e-commerce and online service businesses, with multilingual customer support solutions that help them grow. We make their customer service faster and easier to use, and we remove language barriers with our software: the chat widget with its AI assistant, and the AI voice agent for phone support.

To provide, improve and protect the service, we process:

  • As controller: the IP address, browser type, device name, email address and location of anyone who visits the service or sends us messages (“visitors”).
  • As controller: the personal data of our clients: the name, domain and email address they give us (“you”).
  • As controller: information about how you use the service and the actions you take in your account, for example the features you use and the settings you change. We use it to improve the service and protect our clients.
  • As processor, on your behalf: the files, documents and other data you manage in the service (“your items”), which the service lets you share and work on with others.
  • As processor, on your behalf: the personal data of your prospective and existing customers.

Voice agent data

The AI voice agent answers your customers’ phone calls automatically. Through it, we collect and process call logs (the start, end and duration of each call), the caller’s phone number and the call transcript.

The audio is not kept after transcription. At the client’s request, recordings and transcripts are sent directly to the client’s own server, in which case Askly does not store them. Calls are processed within the European Economic Area (EEA) (see “Sub-processors and data location”). AI responses are generated with the OpenAI service under Standard Contractual Clauses (SCCs) and a Data Processing Agreement (DPA).

How we protect personal data

We respect everyone’s right to the protection of their personal data, and we do our utmost to keep the personal data we receive and collect secure and confidential.

We apply internal policies and physical, technical and organizational measures to protect personal data against unlawful or unauthorized destruction, loss, alteration, disclosure, acquisition or access. These measures include HTTPS encryption for all data in transit, role-based access control (RBAC), two-factor authentication (2FA) and logging of all access.

When we process personal data based on consent, we ask for it in a clear, distinguishable and understandable way, and we record it in our logs and databases. You can withdraw your consent at any time.

The law may require us to disclose personal data to authorities or supervisory bodies, or to give them access to it.

How long we keep personal data

We keep personal data only for as long as the law or a contract requires, or as long as our business operations need it. Personal data collected through the chat widget and the voice agent is kept for a minimum of 12 months and is then deleted automatically. Each client may agree with us on a different period, after which we permanently delete the personal data.

Sub-processors and data location

We use trusted sub-processors that are bound by equivalent data protection obligations, and we have signed a Data Processing Agreement (DPA) with each of them. Written conversations and attachments are processed within the EEA and do not leave it. Some voice agent processing (AI response generation) takes place in the USA under Standard Contractual Clauses (SCCs).

Our sub-processors:

  • DigitalOcean: server and data hosting (Frankfurt, Germany, EEA). ISO 27001, SOC 2 Type II, PCI DSS.
  • Google Vertex AI / Gemini: AI response generation (europe-west4, the Netherlands, EEA). Data does not leave the EEA and is not used to train models.
  • Google Cloud Translation API: translation of conversations when needed (EEA). ISO 27001, SOC 2, GDPR compliant.
  • Railway: voice agent servers and infrastructure (Europe, EEA). SOC 2 Type II, GDPR DPA.
  • Soniox: speech to text (Europe, EEA). SOC 2 Type II, ISO/IEC 27001, GDPR, HIPAA. Audio is not used to train models.
  • OpenAI: response generation for the voice agent (USA, under SCCs and a DPA). ISO/IEC 27001, SOC 2 Type II.
  • Stripe Technologies: payment processing. Askly does not store or process bank or card details on its own servers.

We notify clients of any change to our sub-processors at least 30 days in advance.

Our website

  • meetaskly.com is hosted by Cloudflare, which processes technical data, such as your IP address and the pages you request, to deliver the website and protect it from attacks.
  • We count visits without cookies: which page is open and for how long, which site or campaign sent the visitor, the country and the type of device, and clicks on buttons such as “Try free”. No IP address, identifier or anything in your browser is stored. The counts are kept in Cloudflare’s European data region for up to 400 days.
  • We use Google Analytics on meetaskly.com only if you accept analytics cookies. You can change your choice at any time under “Cookie settings” at the bottom of every page. The details are in our Cookie policy.
  • Cloudflare and Google may process this data outside the EEA, under the EU-US Data Privacy Framework or Standard Contractual Clauses.
  • When you send us a form on the website, for example to join the partner program, we use the details you enter to reply to you and to run the program.

Children

We do not market specifically to children under the age of 18.

Data breaches

The Fair Information Practice Principles are at the heart of how we handle personal data. If a personal data breach affects your data, we will notify you without undue delay, and no later than 72 hours after becoming aware of it, by email or through the service, in line with Articles 33 and 34 of the GDPR.

Personal data we collect

We collect and process only the following personal data, which is either publicly available or provided by you:

  • your first and last name
  • your email address
  • your phone number
  • your domain, if you have a website or are associated with a company that has one

We use these sources of publicly available data:

  • public websites
  • the Google search engine
  • social media (Facebook, LinkedIn) and LinkedIn Sales Navigator
  • specialized tools (Hunter.io, Usebouncer.io, RocketReach, Phantombuster)

We use analytics tools such as Google Analytics (on our website only with your consent), and outreach tools such as GMass and Woodpecker to contact you.

We also collect data when you register on our website, place an order, subscribe to a newsletter, respond to a survey, fill in a form, use live chat or enter information on our website.

We do not buy databases containing personal data from third parties.

We may contact you by phone or email about new opportunities to work together. You can opt out at any time, and we will delete your personal data from all our databases within 3 days.

You can object to processing or withdraw your consent at any time by clicking “Unsubscribe” in our emails.

Who has access to your personal data

Your personal data is kept behind secure networks and is accessible only to a limited number of people who have special access rights to these systems and who have signed a written confidentiality agreement.

All sensitive payment information you provide is encrypted and handled by Stripe Technologies. All payments are processed by Stripe and are neither stored nor processed on our servers.

We process your personal data:

  • to perform a contract with you, or to take steps at your request before entering into one (GDPR Article 6(1)(b));
  • with your consent (Article 6(1)(a)), for example for analytics cookies on our website; or
  • on the basis of Askly OÜ’s legitimate interest (Article 6(1)(f)), which includes asking for your consent to further processing and answering messages sent through our contact forms.

Who we share your data with

We do not sell or share information that identifies our clients with companies, organizations or individuals outside Askly OÜ, except in these cases:

  • With your consent. We share information with companies, organizations or individuals outside Askly OÜ when you have agreed to it.
  • Analytics and business partners (limited, non-identifying information). We may share aggregated or pseudonymized information, including demographic information, with partners such as analytics providers and applications, for example social media integrations with our service.
  • Sub-processors. We share data with the sub-processors listed under “Sub-processors and data location”, only as far as needed to provide the service, always under a Data Processing Agreement (DPA) and, where required, Standard Contractual Clauses (SCCs).

If you use third-party applications or websites integrated with our service, they may collect information about your activity under their own terms and privacy policies.

We apply a range of security measures when you place an order or enter, submit or access your information, to keep your personal data secure.

Apart from the providers named in this Privacy Policy, your personal data is not transferred outside Askly OÜ. For the service, transfers outside the EEA take place only for the voice agent’s AI response generation (OpenAI, USA), under Standard Contractual Clauses (SCCs) and a Data Processing Agreement (DPA). For our website, see “Our website”.

Technical data we collect

To improve our solutions, we collect this technical data about requests to our service:

  • IP address
  • date and time of the request
  • time zone difference from Greenwich Mean Time (GMT)
  • content of the request
  • access status and HTTP status code
  • amount of data transferred
  • the website the request comes from
  • browser
  • operating system
  • browser language and version

We use this information to design our website to better meet our clients’ needs.

Marketing emails (CAN-SPAM Act)

The US CAN-SPAM Act sets the rules for commercial email, gives recipients the right to stop receiving it, and sets strict penalties for violations.

We collect your email address to:

  • send you information and answer your questions and requests
  • process orders and send order information and updates
  • send you more information about your product or service
  • market to our mailing list, or keep emailing our clients after the first transaction

In line with CAN-SPAM, we:

  • do not use false or misleading subject lines or email addresses
  • make clear, in a reasonable way, that a message is an advertisement
  • monitor any third-party email marketing services we use for compliance
  • honor opt-out and unsubscribe requests promptly

To unsubscribe from our emails at any time, follow the instructions at the bottom of each email, and we will promptly remove you from all correspondence.

Your rights

Under the GDPR, you have the right to:

  • access your personal data and receive a copy of it
  • have inaccurate personal data corrected
  • have your personal data deleted
  • restrict or object to processing, including for direct marketing
  • receive your personal data in a portable format
  • withdraw your consent at any time, without affecting processing that took place before

To use these rights, email info@askly.me. If one of our clients processes your data, for example in their website chat, please contact that client first, as they are the controller. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee) or with the supervisory authority where you live.

Other provisions

Our website may contain links to other websites. Askly OÜ is not responsible for their content or security.

We continuously develop our services and may update this Privacy Policy at any time. The date at the top shows when it was last updated.