Privacy policy

1. Controller

The controller is Igor Vetrov, an independent software developer based in Cluj-Napoca, Romania, and the owner of vetrov.dev (the “site”).

For any question about your data or to exercise your rights, contact:

• [email protected]
• Telegram @igovet

2. Data we process

The site has no accounts and no advertising or analytics tools. It processes only what you send and minimal technical data:

• Free-text questions: the question text, the selected site language, the generated answer, the language model name, the time the question was first and last asked, and how many times it was asked. Questions are stored without your name, IP address or any other visitor identifier.
• Project inquiries: the project description, its stage (specification, design, existing project or just an idea), your name, contact method and contact (email or Telegram), an optional comment and attached files (contents, names and sizes), the site language and the submission date.
• IP addresses are used in server memory for request rate limiting. Daily and monthly AI quotas store only an HMAC-SHA256 hash of the IP using a server secret, the period and call/token counters in the database, not the raw IP. These records are not linked to questions or inquiries.
• Hosting logs (such as IP address, time and URL of a request and browser details) that the site's hosting infrastructure may keep to operate and protect it.
• Settings in your browser (your language choice, visual effects level and current conversation) — see the Cookies page.

Suggested questions are answered in your browser and are not sent to the server. Please do not include personal data — yours or anyone else's — in free-text questions; use the inquiry form to share contact details.

3. Purposes

• Answering your free-text question about Igor Vetrov's work and services.
• Caching answers so that identical questions are answered instantly and the owner can review and correct answers.
• Reviewing your inquiry, replying to you and discussing possible cooperation.
• Protecting the site against abuse and overload.

4. Legal basis

Inquiries are processed to take steps at your request before entering into a contract and on the basis of your consent given by submitting the form. Free-text questions are processed on the basis of your consent given by sending them. Rate limiting and hosting logs rely on the legitimate interest in keeping the site secure and available.

You can withdraw consent at any time by contacting the controller; this does not affect processing carried out before the withdrawal.

5. Recipients

• NanoGPT (nano-gpt.com), the service that runs the language model, acting as a processor. It receives only the free-text question and the site language; the request is sent by the site's server, so your IP address and browser details are not shared. Questions already answered in the cache are not sent again. Inquiries are never sent to it.
• Resend (resend.com) delivers an email notification to the owner when configured. It receives the inquiry details and attachments. Files are also stored outside the site’s public directory and are accessible only to the administrator; they are never sent to the AI agent.
• The hosting provider whose servers run the site and its database.

Data is never sold, shared for advertising or used for automated decisions with legal effects. It may be disclosed to authorities only where the law requires it.

6. International transfers

The controller is in Romania (EU). NanoGPT and its model providers may process data outside the European Economic Area and outside your country, including in countries without an equivalent level of protection. By sending a free-text question you agree to this transfer. If you do not agree, do not use the free-text field and contact the controller directly.

7. Retention

• Cached questions and answers: up to 12 months after the question was last asked, unless the owner deletes them earlier.
• Inquiries and attachments: for the duration of our correspondence and up to 3 years after the last contact, unless you ask for earlier deletion.
• IP addresses: in server memory within rate-limiting windows. Hashed AI counters: until the relevant UTC day or calendar month ends plus two days; then deleted in small batches on subsequent AI requests. Records can remain longer when there are no requests.

The owner reviews and deletes records manually in the site's admin panel. Data is deleted when the period ends or the purpose is achieved.

8. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, to withdraw consent and to lodge a complaint with a data protection authority (in Romania, ANSPDCP) or the authority of your country.

To exercise your rights, write to [email protected] or Telegram @igovet and describe the data concerned (for example, the question text or the contact from your inquiry). You will receive a reply within one month.

9. Security

The admin panel is available only to the owner and is password-protected. The server accepts dialogue and inquiry requests only from the site's own pages, validates their size and format and limits request rates. The conversation history in your browser never contains inquiry data.

10. Children

The site is intended for adults and not for anyone under 16. If you believe a child has sent us personal data, contact the controller and it will be deleted.

11. Changes

This policy may be updated. The new version is published on this page with a new effective date.