Privacy Policy

Privacy Policy

Effective Date: 20 October 2025


This privacy notice (“Privacy Notice”) sets out how Asymptote Labs Limited (“Asymptote”, “us”, “our” and “we”) collects and processes your personal data.


Your privacy is a priority for us, and we are committed to protecting your personal data. We process your personal data when you access https://ylookup.ai or its sub-domain (the “Websites”), use our associated software services (the “Services”), or have other business interactions with our team.


Asymptote is the developer of the Ylookup Excel Add-in (the “Add-in”) available via the Microsoft Store. The Add-in is included within the scope of Asymptote's Services per this policy.


We recommend reading this Privacy Notice in full to understand how we handle your personal data.


  1. Important Information & Who We Are


    Controller

    This Privacy Notice applies to personal data which Asymptote processes as a controller when you visit our Websites, use our Services, or interact with us. 


    "Personal data" refers to any information about an individual from which that person can be identified (excluding anonymised data).


    Data processed on behalf of customers
    In some cases, users of our Services may upload, input, or otherwise process personal data relating to third parties, such as clients, employees, or counterparties, for their own business purposes. In these circumstances, Asymptote processes such personal data solely on behalf of and in accordance with the instructions of the customer.


    Where this applies, the customer acts as the data controller and Asymptote acts as a data processor for the purposes of applicable data protection laws. Processing is governed by contractual terms between Asymptote and the customer, including appropriate data protection provisions.


    Changes to This Privacy Policy

    We keep this Privacy Notice under regular review. Changes will be posted on the Website and dated accordingly. Significant changes may be highlighted separately.


    You may request historical versions by emailing info@ylookup.ai.


    Your duty to inform us of changes

    Please let us know if your personal data changes during your relationship with us.


    Other privacy notices

    Additional privacy notices may apply in specific cases. This Privacy Notice supplements those notices.


    Contact details

    If you have any questions about this policy or our privacy practices, contact us at:

    Email: info@ylookup.ai

    Mailing Address: Asymptote Labs Limited, x and why, Arding & Hobbs - 7 St John's Road, London, SW11 1QN


    You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk), though we encourage you to contact us first.

  2. Data we collect about you
    We may collect:

    1. Identity data (e.g., full name)

    2. Contact data (e.g., email, telephone number)

    3. Marketing and communications data (e.g., preferences)

    4. Profile data (e.g., user ID, password, feedback)

    5. Technical data (e.g., IP address, browser type)

    6. Usage data (e.g., how you interact with our Website and Services)

    7. User content data (e.g. content you create, upload, or interact with while using our Services) 


We do not ordinarily collect special categories of personal data or data about criminal convictions.

  1. How we collect your personal data

    We collect data through:

    • Direct interactions (e.g., account creation, feedback, use of our Services)

    • Automated technologies (e.g., cookies – see our Cookie Notices)


    You may choose to share data with us when using our Add-in:

    • You may input or select data from your spreadsheet

    • You may submit prompts to the AI assistant

    • You may upload supplementary files to be analysed by the AI assistant


    Legal basis for processing
    We process personal data only where permitted by applicable data protection laws. Depending on the context, this includes processing that is:

    • Necessary for the performance of a contract, such as providing access to and operating our Services.

    • Necessary for our legitimate interests, including improving and securing our Services, provided those interests are not overridden by your rights and freedoms.

    • Based on your consent, where we ask for it explicitly, such as for non-essential cookies or optional marketing communications.

    • Necessary to comply with legal obligations, including regulatory, accounting, and tax requirements.


    Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.


    Your data is not used to train any models.


    Cookies and similar technologies
    We use cookies and similar technologies to operate, secure, and improve our Websites and Services.

    • Strictly necessary cookies are required for core functionality, such as page navigation, session management, and security. These cookies are essential and cannot be disabled.

    • Analytics cookies help us understand how users interact with our Websites so we can improve performance and usability. Where required by applicable law, analytics cookies are only used with your consent.

    • We may use analytics tools such as Google Analytics or equivalent services, which collect information including pages visited, time spent on pages, browser and device information, and IP address (which may be truncated or anonymised where required by law).


    You can manage your cookie preferences at any time through your browser settings or via our cookie management tools where available.


  1. What we do with your personal data


    We process your data for purposes such as:

    • Registering you as a new user

      • Data: Identity, contact, and profile data

      • Legal basis: Contract

    • Operating, delivering, and protecting the Website and Services

      • Data: Identity, contact, and technical data

      • Legal basis: Contract

    • Improving our Services

      • Data: User content, technical and usage data

      • Legal basis: Consent and legitimate interests

    • Managing our relationship with you

      • Data: Identity, contact, marketing and communications, and profile data

      • Legal basis: Consent and legitimate interests


    If we change the purpose for using your data, we will explain the basis to you.

  2. How we protect your personal data

    We implement technical and organisational measures to safeguard your data. Only those with a business need-to-know have access. 

    Procedures are in place to handle potential breaches.

  3. How long we keep your personal data

    We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, tax, accounting, or reporting requirements.

    1. Retention periods depend on the nature of the data and the context in which it is processed. For example:

    2. Account and profile data is generally retained for the duration of the user’s relationship with us.

    3. Transactional and billing records are retained as required by applicable law.

    4. Where we process personal data on behalf of customers, retention is determined by the customer’s instructions and relevant contractual terms.


    Where we no longer have a legitimate business need to process personal data, we will delete or anonymise it. If deletion is not immediately possible, for example due to backup systems, the data will be securely isolated and protected until deletion can occur.

  4. How we share your personal data

    We may share data with:

    • Service providers (e.g., IT services)

    • Professional advisors (e.g., legal, insurance)

    • Regulators and authorities (e.g., HMRC)


    Specifically, we use a trusted service provider to deliver AI responses. This provider:

    • Does not use your inputs to train models

    • Complies with relevant data protection regulations

    • Logs prompts and responses for a limited period of time, solely for the purpose of detecting violations of their prohibited use policy and any required legal or regulatory disclosures. 


    Please refer to Google Cloud Platform Terms of Service for further information on how they process your data.

    When sharing data, we ensure appropriate safeguards and obligations are in place.

  5. International data transfers

    If any data is processed by third-party services outside your jurisdiction, it is done under appropriate safeguards such as Standard Contractual Clauses.

  6. Your legal rights (for users in the EU, UK, and California)

    Depending on your location, you may have the right to:

    • Request access to your personal data

    • Request correction or erasure of your data

    • Request data transfer

    • Restrict or object to processing

    • Withdraw consent where processing relies on consent

    • Lodge a complaint with a supervisory authority


    Requests are generally handled within one month. We may require identity verification for security purposes.


    Please contact us at:
    Email: info@ylookup.ai
    Mailing Address: Asymptote Labs Limited, x and why, Arding & Hobbs - 7 St John's Road, London, SW11 1QN

  7. Third-party links

    Our Websites may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy notices before providing any personal data.

  8. Children's privacy

    Our Websites and Services are intended for adults (18+).

    We do not knowingly collect data from children under 18. If you believe we have, please contact us.