Who we are
askusers.org runs this site from Queensland, Australia, and is responsible for the personal data described here. For anything about your data, email hello@askusers.org. askusers is for people 16 or older.
What we collect
- Your account. Your name, email address and profile picture from the service you sign in with. Your email address is never shown publicly.
- What you post. Reviews, questions, answers and vendor replies are public, shown with your first name and last initial. Your role and company size are shown if you give them.
- Suggested tools. The website you suggest, and the review you write for it, which stays private until the tool is listed.
- Proof of use. A work email you confirm is kept private and never shown. Screenshots are checked and thrown away straight away; we keep only the result and a fingerprint of the image, so one screenshot can't verify several accounts. A screenshot can show names or other details on your screen, so crop it to what shows you use the tool.
- Vendors. The email address you confirm a tool with. We use it for the claim and for a daily email on days with new reviews or questions, which you can turn off. We keep a record of each change you make to the tool's facts.
- Review invites. When a vendor invites you, we use your address to send that one email, then keep only a scrambled fingerprint of it, so the same tool can never invite you twice and your opt-out is honoured. The address itself is deleted about a day after sending.
- Reviews API keys. The name you give each key, a scrambled fingerprint of it (never the key itself), its first characters and when it was last used.
- Reports. What you report, and an email address if you leave one.
- Technical data. Your IP address and browser are stored with your sign-in session. IP addresses and account ids are also used for rate limits. Reviews and reports keep a scrambled fingerprint of the IP they were sent from, never the address, to spot several accounts acting from one place.
- How the site is used. We use PostHog to count visits and to see which pages people use. Until you accept cookies, it stores only your answer in your browser and only counts visits, using a daily fingerprint of your IP and browser that it doesn't keep. If you accept, it uses a cookie to recognise your visits and records how you use the pages, so we can find what's broken. Everything you type is hidden in those recordings, and so is the text on your account, vendor and admin pages. You can change your answer with “Cookie settings” at the bottom of any page.
- Errors. When something breaks, the error, the page it happened on and your browser are sent to PostHog, whatever you chose about cookies, so we can fix it. Server logs record what the site did, without your email address or what you wrote.
Why, and on what basis
- To provide the site you signed up for: your account, what you post, proof of use, vendor tools, API keys, and the emails about your questions, reviews and reports.
- Our legitimate interest in keeping reviews honest and the site safe and working: trust checks, IP fingerprints, rate limits, review invites sent at a vendor's request, visit counts, error reports and logs.
- Your consent for the analytics cookie and recordings. You can withdraw it with “Cookie settings” at the bottom of any page.
- The law, when we must keep or disclose something.
We don't use your data for advertising and we don't sell it.
Who we share it with
- Our hosting provider, which runs the servers and database the site is stored on.
- OpenRouter and the AI model providers it routes to, to check reviews, questions, answers, vendor replies and screenshots, and to write summaries and answers. They receive the text or image being checked, not your account details.
- Cloudflare, which delivers the site and runs the human check on forms.
- PostHog, in the United States, for the analytics, recordings, error reports and logs described above.
- Our email provider, to send the emails described here.
- Google, GitHub or LinkedIn, only when you choose to sign in with them.
We may also disclose data when the law requires it.
Data outside your country
We are in Australia, and several of the services above are in the United States or elsewhere, so your data is handled outside your country. Where the law requires safeguards for this, we rely on the ones those services provide, such as standard contractual clauses.
Cookies
We use one cookie to keep you signed in. Cloudflare's human check may set its own. If you accept analytics cookies, PostHog sets one to recognise your visits. We don't use advertising cookies.
How long we keep it
- Your account and what you post stay until you ask us to delete them.
- A sign-in session, with its IP address and browser, is deleted when you sign out, or when it expires about 30 days after you last used the site.
- Rate-limit records are deleted after 2 days.
- Copies of the emails we send are deleted about a day after sending.
- Analytics, recordings, error reports and logs are kept in PostHog for the period its plan sets, and are never used for advertising.
Your rights
You can see and edit your reviews and settings on your account page. To get a copy of your data, correct it, delete your account and everything you posted, or object to how we use it, email hello@askusers.org from the address you sign in with. We reply within a month.
If you're unhappy with how we handled your data, email us and we'll work it out with you. You also have the right to complain to the data protection authority where you live. The terms of use cover the rest of the rules.