Last updated: 10 August 2026.
This policy is short because the honest answer is short. This site runs no analytics, no advertising, and no cross-site tracking. There is nothing to disclose about those because there is nothing there.
Who is responsible: Dusan Ristic, operating as a sole proprietor in California, USA ("the Practice"), 1591 Ellis St Apt 305, Concord, CA 94520. Questions or requests about your data: [email protected].
If you are a client with an AI Desk, your engagement data is governed by your signed Data Processing Agreement, and the Desk permission is explained on How your AI Desk works and governed by the Terms of Use. But a client is also a visitor: everything on these public pages, the contact form, the demo, and the sign-in page is covered by this policy, for everyone including clients. The DPA governs what happens inside a Desk after you sign in.
What is collected
From the contact form: your name, your email, your business or occupation (optional), and the message you write.
From the demo: only the text you paste. No name, no email.
From the Desk sign-in page: the email you type, used to find your Desk and send you a sign-in link. If it matches no Desk, it is kept so I can reach out when Desks open.
From every request: your IP address, used only for rate-limiting and abuse prevention. That is the Practice's own record. Separately, Cloudflare as the host processes the IP of every request to this site, as any host does.
There is no account creation, no payment data, no location beyond IP, and no advertising or behavioural data. Saying that plainly is the point: it is short because it is true.
Why, and for how long
Contact details and your message — to answer you, follow up, and send the automatic acknowledgment. Your message is machine-checked for safety before it is routed. Kept in the inbox while we are in conversation and for a reasonable archive period after.
IP address — security and abuse prevention only. These records expire automatically and the windows are short: 60 seconds and 1 hour for the demo's per-visitor limits, 1 hour for the contact form's, and 48 hours for the daily counters that stop a flood. Nothing about an IP is kept beyond those windows.
Demo text — used once, to write the sample you asked for. It is not stored beyond that request.
An email left at the sign-in page that matches no Desk — kept up to 90 days so I can reach out when Desks open, then it expires on its own. Nothing else is stored with it.
The 48-hour counters that stop a flood store only a date and a count — not your IP.
Who else it reaches
Four providers, each doing one job:
Cloudflare — hosting, edge functions, storage, and a safety classifier that machine-checks
contact messages and the demo's replies before they are routed; processes visitor IP addresses.
Resend — delivers the transactional email that routes your inquiry and sends the
acknowledgment; its delivery runs on Amazon Web Services infrastructure.
Google Workspace — the inbox that receives inquiries.
Anthropic — powers the live demo; the text you paste is sent there to draft the sample
reply, and is not used to identify you.
Your information is not sold and not shared for cross-context behavioural advertising. Not as a policy choice we might revisit quietly — there is no such arrangement, with anyone.
Cookies
Exactly one, and only if you are a client signing in to your AI Desk: a session cookie that keeps you signed in. It is strictly necessary, scoped to your own Desk, and expires after 30 days. General visitors, the contact form, and the demo set no cookies at all. There are no analytics or advertising cookies, so there is no banner to click.
We do not sell or share your personal information
The Practice does not sell personal information, does not share it for cross-context behavioural advertising, and never has.
Your rights, if you are in California
Under California law (CCPA/CPRA) you have the right to know what personal information is collected about you, to access it, to have it deleted, and to have it corrected. There is also a right to opt out of the sale or sharing of personal information — not applicable here, because none is sold or shared.
You will never be treated differently for exercising any of these rights. To make a request, email [email protected] and say what you want; I will verify it is you and respond within 45 days, as the law allows, and usually much faster.
An authorised agent may submit a request on your behalf; I will verify both their authority and your identity. And this site does not ask for, or intentionally collect, sensitive personal information as California law defines it.
Children
Nothing here is directed at children under 13, and no information is knowingly collected from them.
Changes
If this policy changes in a way that affects what is collected or who it reaches, the date at the top changes and material changes are announced rather than slipped in. Questions: [email protected].