Who we are
This website is operated by Ash Youssef, a sole trader based in the United Kingdom. For any privacy-related queries, you can contact us at privacy@aiwithash.com.
What data we collect
We collect information in the following ways:
AI chat
When you use the chat feature, we collect:
- The messages you send and the AI responses (stored as a chat session)
- A session identifier stored in your browser's local storage to maintain conversation context
Contact form
If the AI cannot answer your question and you choose to submit your details, we collect:
- Name
- Email address
- Your question and any additional message
- The conversation transcript from your chat session
Automatically collected data
For abuse prevention and rate limiting, we collect:
- Your IP address, which is hashed (one-way encrypted) before storage — we cannot reverse this to recover your actual IP address
Why we collect it
We use your information for the following purposes:
- Chat messages — to provide AI-powered responses about Ash's services and maintain context during your conversation
- Contact form details — to forward your question to Ash so he can follow up with you directly
- Hashed IP address — to enforce rate limits and prevent abuse of the chat and contact features
We do not use your data for marketing, advertising, or any purpose unrelated to the services described above.
Legal basis for processing
Under the UK General Data Protection Regulation, our legal basis for processing your data is:
- Legitimate interest — for operating the AI chat feature and preventing abuse through rate limiting
- Consent — when you voluntarily submit your details through the contact form, you consent to us using that information to respond to your enquiry
Third-party services
We use the following third-party services to operate this website:
- Mistral AI (mistral.ai) — your chat messages are sent to Mistral's API to generate responses. Mistral processes this data as a data processor on our behalf. See Mistral's privacy policy for details.
- Google Workspace (Gmail API) — contact form submissions are delivered via Google's email infrastructure. Google processes this as a data processor.
- Telegram and WhatsApp — the booking panel contains links to these platforms. When you follow a link, you interact directly with those services under their own privacy policies.
We do not use any analytics, tracking pixels, advertising networks, or data brokers.
Cookies and local storage
This website does not use cookies. We store a chat session identifier in your browser's local storage so that your conversation can be maintained if you navigate away and return. This identifier is not used for tracking and is not shared with any third party.
How we store your data
Chat sessions are stored in a database on our server. Rate limit data is stored as hashed files on our server. Contact form submissions are sent via email and are not stored on the website's server after dispatch. All server-side data is stored securely with restricted access.
Data retention
- Chat sessions — automatically deleted after 24 hours
- Rate limit data — automatically deleted after 48 hours
- Contact form submissions — retained in email for up to 12 months, after which they are deleted. You can request earlier deletion at any time.
Your rights under GDPR
As a UK-based service, we comply with the UK General Data Protection Regulation. You have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data
- Restriction — ask us to limit how we use your data
- Portability — request your data in a machine-readable format
- Objection — object to our processing of your data
To exercise any of these rights, email privacy@aiwithash.com. We will respond within 30 days.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated date.