Privacy Policy.

Last updated 8 August 2026

This policy explains what personal data is collected through alyssacaridi.com (the "site"), how it is used, who it is shared with, and the rights you have. It is written to align with the EU and UK General Data Protection Regulation (GDPR). If you have questions, email hello@alyssacaridi.com.

Who is responsible

Alyssa Caridi is the data controller for personal data collected through this site. Contact: hello@alyssacaridi.com.

What data is collected

• Chat messages. If you use the chat features (the floating chat, the About page chat, or the booking chat), the messages you type are collected to generate a response.
• Booking and scope details. If you go through the "book a call" flow, the information you provide is collected, which may include your name, company, email address, and your answers about your project.
• Technical data. Standard server and hosting logs, such as IP address, browser type, and pages visited, collected automatically to keep the site secure and working.

The site does not ask for special category data. Please do not share sensitive personal information in the chat.

How the data is used, and the legal basis

• To answer your questions through the chat and to prepare a project scope. Legal basis: your consent and our legitimate interest in responding to enquiries.
• To schedule a call, send you a calendar invite, and email you the scope. Legal basis: taking steps at your request before entering into a possible engagement.
• To keep the site secure, reliable, and functioning. Legal basis: legitimate interest.

Who the data is shared with

Personal data is processed by the following service providers acting on our behalf, only as needed to run these features:

• OpenAI processes chat messages to generate responses.
• Resend delivers email (your scope brief and booking confirmations).
• Google (Calendar and Meet) creates and sends calendar invites when you book a call.
• Airtable stores scope submissions so we can follow up.
• Vercel hosts the site and processes technical logs.

Data is not sold, and is not shared for third-party advertising.

International transfers

These providers are based in the United States, so your data may be transferred and processed there. Where required, these transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Cookies and fonts

The site does not use advertising or analytics cookies. Fonts are loaded from Google Fonts, which may involve a request to Google's servers that includes your IP address. If this changes, this policy and, where required, a cookie notice will be updated.

How long data is kept

Booking and scope details are kept only as long as needed to follow up on your enquiry or engagement, and then deleted. Chat content is retained only as long as needed to operate and improve the feature. You can ask for your data to be deleted at any time.

Your rights

Under GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these, email hello@alyssacaridi.com. You also have the right to complain to your local data protection authority.

Children

This site is intended for business audiences and is not directed at children under 16.

Changes

This policy may be updated from time to time. The date at the top shows the latest version.