1. Who is responsible?
The controller for this website is Carlos E. Vela. You can contact Carlos about privacy at email@carlosvela.nl or by post at Tuigerstraat 60, 1033 PH Amsterdam, The Netherlands.
2. What information may be processed?
- Information you choose to enter into the assistant, including a question, an implementation challenge or a description of your work.
- The short conversation context sent with a follow-up request so the assistant can respond coherently.
- A short-lived, hashed network identifier used to rate-limit requests and protect the assistant from misuse. The function does not keep the original identifier in its rate-limit record.
- Technical information handled by hosting and service providers, such as request metadata, IP address, browser/device information and security or function logs.
- If you choose the email links, your email provider processes the message. This website does not receive or store that email unless you separately contact Carlos.
Please do not enter passwords, confidential company information, trade secrets, sensitive personal data, children’s data or information about another person.
3. Why and on what basis?
The site uses technical data to host and secure the website, prevent misuse and enforce a small rate limit. This is based on Carlos’s legitimate interest in running a secure, reliable website. The assistant processes a visitor’s message to generate a requested reply only after the visitor actively confirms the Privacy Notice and AI Assistant Terms; the basis for that interaction is consent. You can withdraw consent by stopping use of the assistant or contacting Carlos. Withdrawal stops future use but does not reverse processing already sent to a provider.
The assistant is informational only. It does not make decisions about employment, eligibility, access, credit, health or any other similarly significant matter.
4. Providers and international transfers
The site is hosted on Netlify and uses a server-side Netlify Function to call Mistral AI. The API key is kept in server-side environment variables and is not placed in browser code. Netlify can process the technical data needed to host the site and run the function; its applicable account terms incorporate a data-processing agreement.
When the assistant is used, the message and short conversation context are sent to Mistral AI through its EU regional inference endpoint. Mistral’s published Data Processing Addendum describes Mistral as a processor for customer personal data and includes terms for restricted-country transfers. The same addendum says Mistral may act independently for automated moderation and abuse monitoring, and for model training unless the customer opts out. Zero Data Retention is not enabled for this assistant. Mistral’s published materials say ordinary API inputs and outputs may therefore be retained for up to 30 rolling days for abuse monitoring. Mistral’s account, billing and operational metadata may still be processed outside the selected inference region.
Read the providers’ current notices: Mistral Data Processing Addendum, Mistral Privacy Policy, Mistral Regional Inference, Netlify Data Processing Agreement and Netlify Function Logs.
5. Retention and security
This website does not intentionally save assistant transcripts in its own database. The browser keeps the conversation temporarily until the page is closed or refreshed, so follow-up messages work. The site’s rate-limit record stores only a salted hash for a ten-minute window and expired entries are pruned during request handling. The function is designed not to log message content.
Netlify may retain technical function logs under its account and plan settings. Mistral’s published policy describes up to 30 rolling days of ordinary API input/output retention for abuse monitoring unless zero data retention is activated. The applicable provider terms and account settings govern their retention; this notice will be updated if those settings change. No internet service can guarantee absolute security.
6. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability, and you may withdraw consent. Contact Carlos at email@carlosvela.nl with enough information to identify the request. You may also complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
7. Google Fonts, cookies and changes
The site uses Google Fonts to display Archivo and Space Grotesk. Loading those font files may send your IP address and browser request data to Google. The site does not intentionally use advertising or analytics cookies. This notice will be updated when providers, features or retention practices change.
Important: This notice describes the current design and is not legal advice or a guarantee of GDPR compliance. Carlos will keep the active Mistral account settings and public-facing safeguards under review.