PrivacyPrivacyin plain wordsin plain words

Who is responsible

dwhyte/studio is a Swedish sole trader business (enskild firma) in Stockholm, owned by its founder Shamil Musaev, who is the controller of the personal data described here. Write to dwhytestudio@gmail.com about anything on this page.

What is collected

• When you send your details, through the form in the chat or by typing them into the chat: your name, your email or phone number and what you need, with the time it was sent and your browser type.
• When you talk to the chat assistant: the messages you write. They are sent to an AI model to write the reply, and the conversation (your messages and the assistant's replies) is saved in the studio's database. It is saved without your IP address or any ID of your device. Please don't share sensitive details, such as health information, in the chat.
• When you visit: your IP address, which the hosting provider sees with every request and keeps briefly in its logs. The site also holds it in memory for a few minutes to stop spam in the chat.

Why

• To answer you and talk about your project. This is a step you ask for before a possible agreement (GDPR article 6(1)(b)).
• To see what visitors ask the chat assistant and make its answers better. This is a legitimate interest (article 6(1)(f)): the conversations are read only by the studio's team, never used for ads and deleted after 90 days.
• To keep the site working and safe from abuse. This is a legitimate interest (article 6(1)(f)).

Your details are never sold, never used for ads and never added to a newsletter.

Where it is kept, and who helps

A few services do part of the work. Each one has a data processing agreement:

• Vercel hosts the site. The part that receives the form and the chat runs in Stockholm.
• Google Cloud (Vertex AI) runs the chat model, inside the EU. Google does not use the messages to train its models.
• Supabase keeps the enquiries and the chat conversations in a database in Stockholm.
• Resend sends the enquiry to the studio's Gmail inbox by email, and a short confirmation to you if you left an email address.

Vercel, Google, Supabase and Resend are US companies. Where data may leave the EU, it is covered by the EU–US Data Privacy Framework or the EU's standard contractual clauses. Only the studio's team reads what you send.

How long

• An enquiry that does not turn into a project is deleted within 12 months.
• If we work together, the details are kept for the project, and invoices and agreements for as long as Swedish bookkeeping law requires (seven years).
• A chat conversation in which you didn't leave your details is deleted automatically 90 days after the last message. If you did leave them, it is kept together with your enquiry, as above.
• Your browser also keeps its own copy of the chat, so a conversation survives a page reload. It clears itself 30 minutes after your last message.

Your rights

You can ask to see the data held about you, to correct it, to have it deleted, to limit how it is used, to object to it being used or to get a copy of it. Write to dwhytestudio@gmail.com and you will get an answer within a month, usually much sooner.

To have a chat conversation deleted without leaving your details, write roughly when it happened and what you asked, so it can be found.

If you think your data is handled wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY) at imy.se.

Cookies

The site sets no cookies and runs no analytics or tracking, so there is no cookie banner. It uses your browser's own storage for three things the site needs to work: the chat history (see above), a flag for the transition between pages, and a note that you closed the suggestion to view the site in the other language or picked one yourself, so it isn't shown again. All of it stays on your device. To decide whether to make that suggestion, the site asks the hosting provider which country your IP address is in; the answer isn't stored.