Privacy Policy

Ask The Master operates the website askthemaster.app. This policy explains how we collect, use, and protect your information when you use our service.

Account Information

When you create an account, we collect your name, email address, and (if using Google Sign-In) your Google profile picture. Passwords are hashed using PBKDF2-SHA256 and never stored in plaintext.

API Keys (BYOK)

If you provide your own API keys, they are encrypted at rest using AES-256-GCM. We never log, display, or transmit your keys in plaintext. Only the last 4 characters are stored as a hint.

Debate Content

We store the topics you submit and the AI-generated responses. Content is associated with your account and not shared unless you use the share feature.

• To provide and maintain the service
• To process payments via Stripe
• To enforce rate limits based on your plan
• To send transactional emails
• To improve the service based on aggregate usage patterns

• Stripe processes payments.
• Google OAuth is used for sign-in.
• OpenAI / Anthropic process debate prompts via their APIs.

We retain your data for as long as your account is active. You can delete your account and all associated data at any time. Free plan debate content older than 30 days may be automatically removed.

We use industry-standard security: HTTPS, AES-256-GCM encryption for API keys, PBKDF2 password hashing, and isolated Docker containers.

We use a single localStorage token for authentication. No tracking cookies, no advertising cookies, no third-party cookie services.

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your debate history
• Withdraw consent for data processing

For questions about this policy, contact [email protected]