How is my data encrypted?

In transit: All connections to AskVerdict use TLS 1.3. Provider API calls are made over HTTPS.

At rest: Debate content and user data are stored in Postgres with AES-256 encryption at the database level.

BYOK keys: Never stored. Memory only, per request (see BYOK section).

Passwords: Hashed with bcrypt (12 rounds) and never stored in plain text.

AskVerdict does not use your debate content to train or fine-tune AI models.

Who can see my debates?

By default, your debates are private: only you can see them when signed in.

Debates become visible to others only when you explicitly:

  • Toggle a debate to Public (accessible to anyone with the link)
  • Publish to your Public Profile (visible on your /u/username page)

AskVerdict staff do not access individual debate content except when required to investigate a reported abuse or support issue, and only with documented reason.

How do I delete my account and data?

Go to Settings → Security → Danger Zone and click Delete Account. You will be asked to type DELETE and confirm with your password.

Deletion is permanent and removes:

  • Your profile, email, and all account data
  • All debates, verdicts, and collections
  • API keys and SDK access
  • Active subscriptions (automatically cancelled)
  • Stripe customer record and billing history
  • Remaining credit balance

Data is purged from our systems within 30 days of deletion per our data retention policy.

Is AskVerdict GDPR compliant?

AskVerdict is built with data minimisation and user control as core principles:

  • You can export all your data at any time from Settings → Account → Export Data
  • You can delete your account and all data at any time
  • We do not sell personal data to third parties
  • Optional analytics and preference cookies are consent-based and can be managed in the cookie banner and Settings
  • Core product telemetry used for security, reliability, and operations remains active
  • For Data Subject Access Requests or other GDPR enquiries, email support@askverdict.ai

Full details are in our Privacy Policy at askverdict.ai/privacy.

Do you provide a Data Processing Addendum (DPA)?

Yes. AskVerdict provides a standard Data Processing Addendum for customers with privacy or procurement requirements. You can review it at /data-processing-addendum and request a signed copy by contacting support@askverdict.ai.

Where can I see your subprocessors?

Our current subprocessor list is published at /subprocessors. It includes each vendor's role and operating region. We update the list when material changes occur.

Do you publish a security practices overview?

Yes. We publish a high-level overview at /security-practices covering controls, incident response approach, and security contact guidance.

Where are billing and refund terms documented?

Billing, cancellation, renewal, and refund rules are documented in /billing-refunds and referenced in our Terms. If you need invoice or charge support, contact support@askverdict.ai.

Do you have an AI limitations and responsible-use policy?

Yes. Our AI Use & Limitations Policy is available at /ai-use-policy. It explains model limitations, high-stakes decision guidance, and why human review is required before relying on outputs.

How can I report a security vulnerability?

Please follow our Vulnerability Disclosure Policy at /vulnerability-disclosure. Send reports to support@askverdict.ai with reproduction steps and impact details. We review and triage reports as quickly as possible.

Related help topics

Browse adjacent support areas for faster troubleshooting and onboarding.

For production-impacting issues, check the status page first, then include relevant request IDs when contacting support.