Privacy
Two different things get called privacy and they are conflated constantly, so they are separated here: what this website collects, and what the platform processes for a customer under a contract. If you are reading this page, the first section is the one about you.
Reviewed 2026-08-06.
This website
This site sets no cookies, stores nothing in your browser, loads no fonts, scripts, images or embeds from anyone else, and runs no analytics. There is no consent banner because there is nothing to consent to — and that is a property of the build, checked on every change, rather than a promise in a paragraph.
The web server keeps ordinary access logs: the requesting IP address, the time, the path, the response status, the user agent and the referrer. They exist to keep the service working and to notice abuse. The lawful basis is legitimate interest, and they are kept for 30 days and then deleted.
If you email us from a link on this site, we hold that correspondence for as long as the conversation and its follow-up need — an ordinary business inbox, not a marketing database. It is not used for a newsletter, because there is not one.
The platform
When a customer runs workflows here, the platform processes whatever their workflow touches — the contents of a message, a calendar, a ticket, a document — as a processor acting on their instructions. That is governed by the agreement with that customer, not by this page. Nothing about it applies to a visitor to this website.
One point deserves stating plainly rather than being left to a schedule, because it is the one people assume away: the model provider is a sub-processor. A step that asks for a judgement sends the data that judgement is about to whichever provider that deployment is configured for. Which provider that is, is a configuration choice and part of the conversation before anything runs.
Who else is involved
| Party | Role | Where |
|---|---|---|
| Hetzner Online GmbH | Server hosting | Germany |
| OVH SAS | Domain registration and DNS | European Union |
| Model provider | Judgement and generation steps | Per deployment, disclosed before anything runs |
The identity provider is self-hosted on the same infrastructure and is not a third party. This list is the current one; a customer agreement carries the notice obligation for changes to it.
Your rights
Under the GDPR you can ask what is held about you, ask for it to be corrected or deleted, object to processing, and complain to a supervisory authority. For anything this website holds — which is an access log and possibly an email thread — write to info@gianlucamazza.it. If your data reached us through a customer's workflow, they are the controller and the request starts with them.
Controller
The entity responsible, and its registered address, are on the legal notice.