Privacy Policy

AskEnola is the data controller for the personal information described in this policy, except where we're processing financial and business data on behalf of a customer under a services agreement, in which case the customer is the controller and AskEnola acts as processor. Our Data Processing Agreement, available to customers on request, governs that processor relationship in detail.

If you have questions about this policy or how we handle your data, contact us at [email protected] or AskEnola, Inc., 74 E. Glenwood Avenue, Unit 5130, Smyrna, Delaware 19977.

• Account and contact information. When you sign up, request a demo, or contact us, we collect your name, work email, company name, job title, and phone number if you provide it.
• Financial and business data you connect to the platform. The CFO Command Center works by connecting to your accounting systems, ERPs, billing platforms, and other financial data sources. This can include revenue figures, expense data, customer and vendor records, invoices, subscription and billing metrics, and other financial reporting data your company chooses to connect. We process this data to generate the reports, dashboards, and analysis you use us for. We don't use your company's financial data to train models that serve other customers, and we don't sell it.
• Payment information. Billing for AskEnola subscriptions is handled through our payment processor, Stripe. We don't store full payment card numbers on our own systems. Stripe collects and processes your payment details directly under its own privacy policy.
• Usage data. We collect information about how you use our product and website, including pages viewed, features used, login times, browser type, IP address, and device information. This helps us understand what's working, fix bugs, and improve the product.
• Communications. If you email us, fill out a form, or use in-app support, we keep a record of that correspondence to respond to you and improve our support.

We use the information above to:

• Provide, operate, and maintain the AskEnola platform, including generating the financial reports and insights the product is built to produce
• Create and manage your account, and authenticate your logins
• Process payments and manage subscriptions
• Respond to support requests and communicate with you about your account
• Send product updates, onboarding content, and marketing communications, where you've agreed to receive them
• Monitor and improve product performance, reliability, and security
• Detect and prevent fraud, abuse, or unauthorized access
• Meet our legal and contractual obligations

Where GDPR applies, our legal bases for this processing are performance of a contract with you (running your account and delivering the product), our legitimate interests (improving the product, keeping it secure, and marketing to prospective customers), consent (where you've opted into marketing), and legal obligation (where we need to retain records for tax, accounting, or compliance reasons).

AskEnola's reporting and analysis capabilities are powered by Microsoft Azure AI Foundry, using Azure OpenAI models. Under our Azure OpenAI enterprise terms, customer data is not used to train Microsoft's or OpenAI's foundation models. We don't use customer financial data to train AI models used by other AskEnola customers.

We don't sell your personal information or your company's financial data. We share information with:

• Service providers who help us run the product. This includes cloud hosting providers, payment processing (Stripe), email and communications tools, customer support software, and AI infrastructure providers. Each of these providers is bound by contract to use your data only to provide their service to us, and to apply appropriate security measures.
• Professional advisors. We may share information with our lawyers, auditors, and accountants where necessary for legal, tax, or compliance purposes.
• Legal and safety reasons. We may disclose information where required by law, in response to a valid legal request, or where we believe disclosure is necessary to protect the rights, property, or safety of AskEnola, our users, or others.
• Business transfers. If AskEnola is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We'll notify you before your data becomes subject to a different privacy policy.

We store data on secure cloud infrastructure and apply administrative, technical, and physical safeguards appropriate to the sensitivity of the data involved, including encryption in transit and at rest, access controls limiting data access to personnel who need it to do their jobs, and regular review of our security practices. No system is completely secure, and we can't guarantee that data will never be affected by a security incident, but we work to minimize that risk and will notify affected customers promptly if a breach occurs that affects their data.

We host AskEnola entirely on Microsoft Azure. Customer data is stored in Azure SQL Database and Azure Blob Storage in the East US 2 region, and processed within that same region, apart from Azure's own managed platform services and backups, which Azure operates as part of the underlying infrastructure. We don't currently have customers with specific data residency requirements, but we can support region-specific Azure deployments where a customer's compliance needs require it.

We retain account and financial data for as long as your subscription is active. After cancellation, you have a 30-day grace period during which your account and connected data can be reactivated. If the account isn't reactivated, your data is permanently deleted from production within 30 days of cancellation. Encrypted backups are retained only per Azure's standard managed backup policies, independent of this deletion timeline. Security logs and audit records may be retained longer than customer business data where needed for operational, legal, or compliance purposes.

Our website and product use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the site and product are used. You can control cookies through your browser settings; blocking them may affect some features. We don't use cookies for third-party behavioral advertising.

Depending on where you're located, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent where processing is based on consent
• Opt out of marketing communications at any time, using the unsubscribe link in any email or by contacting us directly

To exercise any of these rights, contact us at [email protected]. We'll verify your identity before responding and will act on your request within the timeframe required by applicable law (for example, one month under GDPR). If your company is our customer and the data in question is your company's financial data, we'll typically direct the request to your company as the data controller, since they control that data and its retention.

If you're in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

AskEnola is a business product built for finance professionals. It isn't directed at children, and we don't knowingly collect personal information from anyone under 16. If we learn that we've collected information from a child, we'll delete it.

We may update this policy as our product and practices evolve. If we make material changes, we'll notify you by email or through a notice on our website or product before the changes take effect. Continued use of AskEnola after a change takes effect means you accept the updated policy.

If you have questions about this policy or want to exercise your data rights, reach us at:

[email protected]
AskEnola, Inc., a Delaware corporation
74 E. Glenwood Avenue, Unit 5130, Smyrna, Delaware 19977