Privacy and data

Ask Scott uses your subscriber email to verify access. When you chat, it stores your question, the answer, limited retrieval identifiers and timing, model-usage metadata, optional rating, and Learn More clicks. Full chat records are deleted after 90 days as one unit.

Before that deletion, Ask Scott adds the turn to long-term daily totals for volume, outcomes, ratings, source clicks, performance, retrieval, and model cost. Those totals contain no chat text, email, subscriber, session, conversation, turn, URL, chunk, or provider-request identifier and cannot be used to reconstruct your history.

Other records

Used or expired sign-in links are kept for no more than one additional day. Expired or revoked login sessions are kept for 30 additional days. One-way rate-limit records are kept for two days. Curated quality-test questions and answers are kept for one year.

Squarespace remains the financial and order-history source. Ask Scott keeps a minimized entitlement ledger to provide access, prevent the same order from being applied twice, and record its own administrative decisions. Duplicate order email is removed after 30 days. Detailed order observations are deleted after one year, and older order snapshots are reduced to the minimum operational ledger. These records are not used as chat history.

Service providers

Ask Scott sends chat text and selected photography reference material to OpenAI to create answers and embeddings. Supabase stores application data; Vercel hosts and measures the application and provides automated bot protection; Resend delivers sign-in and operational email; and Squarespace supplies subscription and order status. Ask Scott does not store payment-card, wallet, postal-address, or phone data from Squarespace Orders.

Your data

Sign in with your subscriber email to download or delete your Ask Scott data. Contact Scott Davenport Photography if you also want a review of retained order or legal records.

Policy effective August 16, 2026. Manual database backups are kept for no more than 30 days. A verified deletion is reapplied before traffic resumes if an older backup must be restored.