---
source: CrewKit documentation
url: https://crewkit.io/docs/asks-privacy.md
title: "Asks privacy fact sheet"
description: "The facts an organization's privacy impact assessment needs before it turns Asks on."
---


Asks let your organization put questions to people outside it through a link. An organization
admin turns them on with one toggle in **Settings → Organization → Asks**. Once crewkit publishes
its data processing agreement, turning Asks on accepts it for your organization, and an
organization already using Asks is asked to accept it; the French version governs. This page gives the facts your privacy impact
assessment needs; you can record that it is done, with your privacy officer and policy, in
**Settings → Organization → Privacy & Compliance**.

## What is collected

- **The answers** a Respondent gives, every revision of them, and the language they chose.
- **The name they give**, which may be any name they choose.
- **A hashed network address**: an HMAC under a dedicated key, never the raw address, deleted
  after 30 days. It limits abuse (rate limits, reports).
- **A token in the Respondent's browser**, on `asks.crewkit.io` only, so the same browser can
  return to its own Response.

Nothing is recorded when a page is only opened: no view counts, no first-seen stamps.

## Purposes

Your organization uses the answers to make decisions in its projects. Answers a person in your
organization **confirms** reach your AI agent sessions, and enter session records kept under your
organization's session retention.

## Where it goes

| Service provider | Role |
|---|---|
| Vercel | Serves the static asks page. It never sees a token, a question or an answer. |
| DigitalOcean | Hosts crewkit's API and database, where Responses are stored. |
| Anthropic | Sessions that read confirmed answers are summarized and analyzed under your session settings. |
| Voyage AI | Sessions that read confirmed answers are vectorized under your session settings. |

Information may be communicated outside Québec. The notice every Respondent sees names all four
providers, whatever your session settings are. No Ask code calls Anthropic or Voyage AI: they
only see sessions, under your session settings.

## The notice Respondents see

Every Ask page shows a fixed notice in English and French: the purposes, the means, the rights of
access, correction and withdrawal, the service providers above and possible communication outside
Québec. When your Privacy & Compliance settings name them, it also shows your privacy officer's
title and contact and a link to your privacy policy; when they are empty, it shows nothing extra.
The page also
shows your organization's name and says it is hosted by crewkit, which never asks for passwords or
payment. With a verified domain it shows that domain and your logo; without one it marks your
organization as unverified and, when the publisher's proven address is under one of your domains,
names that domain (never the address).

## Rights

A Respondent keeps a private link to their Response. Through it they can read it, download it as
JSON, change it while the Ask is open, and erase it at any time, even after the Ask closes or your
organization turns Asks off. They can also write to your privacy officer, or to your
organization when you name none.

## Retention and erasure

- Responses are deleted when your organization's retention period (default 180 days) has passed
  since the Ask closed.
- Turning Asks off closes every open Ask at once, which starts that period. Losing the verified domain closes nothing: the page is marked unverified and the logo
  is hidden.
- An erasure reaches every revision of the Response and every confirmed copy of it. Copies already
  in captured session transcripts follow session retention.
- A Respondent who answered as their crewkit account and later deletes that account keeps their
  Responses with your organization, without their name: the name shows as "Deleted account", and
  the account's name and email address, matched exactly as the account held them, are replaced in
  the answers, their revisions and every confirmed copy. Copies already read into your AI sessions
  follow session retention, and the answers can still identify the person by what they say. Their
  private link still lets them correct or erase the Response.

## Data residency

Organizations with data residency can use Asks. The Asks themselves (questions, Responses,
screenshots and the logo) are stored on crewkit's control plane, in its database and object
storage, as they are for every organization: a public page cannot be served from your data plane.
Confirmed answers a session reads become part of that session, which stays resident like the rest
of its content: crewkit never summarizes, analyzes or vectorizes it.