# Privacy Policy

This privacy policy explains how kivilaid.ee ("the Site"), operated by Ando Kivilaid, collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).

## 1. Data Controller

The data controller for this website is:
Ando Kivilaid
Email: ando [at] kivilaid.ee
Location: Tallinn, Estonia

## 2. What Data We Collect

AI Demo & Contact Form: When you use the AI demo or contact form, we collect the information you voluntarily provide, such as your business description and email address.

Chatbot Conversations: If you interact with the AI chatbot widget, your messages and conversation data may be processed by the chatbot service provider.

Analytics: We may collect anonymized usage data such as pages visited, time on site, and referral source to improve the website experience.

Technical Data: Our hosting provider (Vercel) automatically collects standard server logs, including IP addresses, browser type, and access times.

## 3. How We Use Your Data

We use collected data to:
• Respond to your inquiries and provide AI demo results
• Improve the website and user experience
• Ensure the security and proper functioning of the site

We do not sell your personal data to third parties.

## 4. Third-Party Services

The Site uses the following third-party services that may process your data:
• Vercel — Hosting and deployment (servers in EU/US)
• AI Chatbot Provider — Powers the conversational AI widget
• ipapi.co — Used for language detection based on country (IP geolocation)

Each service operates under its own privacy policy and data processing agreements.

## 5. Data Storage & Retention

Your data is stored only as long as necessary for the purposes described above. Contact form submissions and email addresses are retained until your inquiry is resolved or you request deletion. Analytics data is anonymized and aggregated.

## 6. Your Rights Under GDPR

As an EU resident, you have the right to:
• Access — Request a copy of your personal data
• Rectification — Correct inaccurate personal data
• Erasure — Request deletion of your personal data
• Restriction — Restrict processing of your data
• Portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing of your personal data

To exercise any of these rights, contact ando [at] kivilaid.ee. We will respond within 30 days.

## 7. Cookies & Local Storage

The Site uses localStorage to save your preferences (language, theme, color hue, analytics consent). These are stored locally on your device. If you accept analytics in the consent banner, we load Google Analytics 4 with IP anonymization to measure page views and events such as contact form submissions. You can decline analytics and still use the Site fully. Vercel Analytics and Speed Insights may collect anonymized performance data as described in Vercel's privacy policy.

## 8. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.

## 9. Contact

For any questions about this privacy policy or your personal data, please contact:
ando [at] kivilaid.ee