Privacy Policy

When you send a message to the AI assistant, its text and previous messages in that conversation are sent to OpenAI to generate a reply. AI can make mistakes; contact me directly for final information about working together. Do not enter sensitive, personal or confidential business information.

On this website, conversations live only in page memory until you reload or start a new conversation. I do not save chat transcripts in my database. OpenAI calls use store: false; the provider may still retain data under its security policies and contractual terms.

To limit costs and abuse, Firebase stores request counters and a daily keyed hash of the IP address, without message text. This data is processed for service reliability and security. You can always use the contact form instead of the assistant.

The assistant is optional. I process messages based on my legitimate interest in answering voluntary inquiries about my services (GDPR Article 6(1)(f)); abuse prevention and cost controls use the same basis. You may object by emailing hello@matkomilic.com and use direct contact instead. The chat does not make decisions with legal or similarly significant effects on you.

By default OpenAI does not use API messages to train models unless the account owner explicitly enables data sharing. Provider response storage for conversation continuation is disabled, but OpenAI abuse monitoring logs may contain messages for up to 30 days, or longer where legally required. Current policy: https://developers.openai.com/api/docs/guides/your-data.

To verify unchanged conversation history, the browser temporarily holds a conversation signature valid for one hour. It contains no message text. Security counters have an expiry marker: records associated with the daily IP hash after two days, daily aggregate counters after seven days. Actual automatic deletion depends on an enabled Firebase TTL policy and may be delayed; monthly aggregate counters contain no visitor identifier.

The data controller is Matko Milić, Croatia. For privacy questions, contact me at hello@matkomilic.com.

If you submit the contact form, I may process your name, email address, company or project name, budget, timeline, and the message you send.

Contact inquiries may be stored in a secure database so I can respond reliably and keep a basic communication record.

The site may also process basic technical data such as IP address, browser type, device, language, access time, and security logs.

If you accept analytics cookies, I use Google Analytics to understand visits, page loading, and general site usage.

Contact form data is used to answer your inquiry, evaluate possible cooperation, and keep basic business communication.

Technical data is used for security, maintenance, and reliable operation of the website.

Analytics data is used only if you consent to cookies, to improve content, performance, and user experience.

Contact data is processed based on your action of sending an inquiry and my legitimate interest in responding to a business request.

Analytics cookies are used only based on consent. You can decline them without affecting your use of the website.

Security and technical logs are processed based on legitimate interest in website security and stability.

The site uses necessary cookies or local storage to remember your cookie choice.

If you accept, Google Analytics may set analytics cookies. If you decline, analytics is not activated.

You can change your choice by clearing site data in your browser or contacting me by email.

I do not sell personal data. Data may be processed through service providers that enable hosting, email, analytics, or site security.

OpenAI processes AI messages, Vercel provides website infrastructure, and Google Firebase stores abuse prevention counters. Depending on processing locations and subprocessors, data may be processed outside the European Economic Area. Such transfers require an applicable adequacy decision or appropriate contractual safeguards such as standard contractual clauses. You can request information about applicable providers and safeguards at hello@matkomilic.com.

If legally required, data may be shared with competent authorities.

Contact inquiries are kept for as long as reasonably necessary for communication, potential cooperation, and basic business records.

Analytics and technical data are kept according to the tool and service provider settings, and only as long as needed for the stated purposes.

You may request access, correction, deletion, restriction of processing, objection to processing, and withdrawal of consent where processing is based on consent.

To exercise your rights, contact me at hello@matkomilic.com. You also have the right to lodge a complaint with the competent data protection authority.

In Croatia you can complain to the Croatian Personal Data Protection Agency (AZOP), https://azop.hr. You also have the right to data portability where the legal conditions are met. I cannot associate chat messages with your identity unless you disclose it; do not send additional sensitive information to exercise your rights.

I use reasonable technical and organisational measures to protect data against unauthorised access, loss, or misuse.