Legal / Privacy
Privacy Notice
What I collect, why I use it, how long I keep it, and the choices available to you.
- 01What I collect
- 02How I use it
- 03Aeva and external services
- 04Optional journey summaries
- 05Retention and deletion
- 06Your choices and rights
- 07Visitors under 18
- 08Security and questions
What I collect
I collect only the information you choose to submit for an enquiry, privacy request, publication update, Vartalap contribution, feedback, or an optional Aeva conversation share. Please do not send sensitive personal documents or information that is not needed for your request.
How I use it
I use submitted information only to provide the feature you requested, reply to you, prevent abuse, meet legal obligations, and keep essential operational records. I do not sell personal information, use it for targeted advertising, or add contact enquiries to a mailing list. When email notifications are enabled, contact details and enquiry content are sent through the owner's connected Gmail account to the configured inbox. Visitors are not asked to connect their own Google accounts. This integration sends email; it does not read the owner's inbox. OAuth credentials are kept in server configuration, and the owner can revoke access through their Google Account. Google API data is not used to train AI models.
Aeva and external services
Aeva is an AI assistant. Questions may be processed with relevant public portfolio material and relevant turns from this chat to prepare an answer. Live web search is optional and clearly identified before use. Your active chat is kept in this tab’s session storage to recover after a refresh, and is cleared when you select End chat. Server-side conversation text is kept only when you deliberately choose to share it. A job description pasted into the recruiter tools is processed for that response and is not stored by the recruiter subsystem. If you request an AI-generated interview, the job description may be sent to the configured AI provider with the minimum relevant public portfolio context.
Optional journey summaries
First-party analytics run only after you enable them in Cookie Preferences. They record approved page categories, project slugs, page counts and bounded attention time for up to 30 days. They do not retain IP addresses, user agents or arbitrary URLs and are never joined to a contact enquiry.
Retention and deletion
I keep personal information only for the stated purpose and remove it on the applicable schedule. Short-lived security records expire much sooner. Backups follow their own protected expiry cycle, so a deletion may take time to reach every backup copy.
Your choices and rights
You may ask for access, correction, deletion, consent withdrawal, or grievance review. I may need to verify that the request relates to you before disclosing or changing a record. Use the privacy request form to begin.
Visitors under 18
An under-18 visitor may use the contact form only after completing the safety declaration. Minors must not submit identity documents, school records, financial or health information, a home address, or a precise location. I process the enquiry only to respond to the stated request.
Security and questions
I use access controls, encryption where appropriate, validation, abuse protection, and limited retention. No online service can promise zero risk. For a privacy question, use the contact page and choose the privacy or legal category.