This site is operated by Armita Banihashemi (contact details in the Legal Notice). I take your privacy seriously and keep data collection to the minimum the site needs to work. This policy explains what happens to your data, in plain language, as required by the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller for this website is: Armita Banihashemi. Email: armita.banihashemi@gmail.com
The chatbot
The centerpiece of this site is a chatbot that assesses how I fit a role you are hiring for. Here is exactly what happens with what you type.
Your messages and pasted job descriptions are sent to Anthropic PBC (USA), the provider of the Claude AI model, to generate the bot's replies. Anthropic processes this data as my service provider and, under its API terms, does not use it to train its models. Please do not paste confidential information into the chat.
Anything you volunteer (your name, company, or contact details) becomes part of the conversation and is processed the same way. Sharing it is optional, and the bot will tell you before asking.
When the conversation ends, an automated summary of it (role discussed, how the conversation went, and any contact details you chose to share) is emailed to me via the email service Resend Inc. (USA), and may additionally be stored in a log hosted by Upstash Inc. (Redis database, EU region where available). The log contains a timestamp, the number of messages, and the summary text. It does not contain your IP address.
Legal basis. My legitimate interest (Art. 6(1)(f) GDPR) in operating the bot, presenting myself to potential employers, and following up with interested visitors. Where you actively share your contact details for follow-up, the processing is also based on your consent through that action (Art. 6(1)(a) GDPR).
Retention. Conversations are not stored on my servers beyond processing. Summaries in the log are deleted after about 30 days. Summary emails are kept like normal correspondence and deleted when no longer needed.
Please note. The bot's answers are generated by an AI model and may be inaccurate or incomplete. They are informational and not a binding statement by me.
Bot and abuse protection
To protect the site against automated abuse, I use Cloudflare Turnstile, a service of Cloudflare, Inc. (USA). Turnstile evaluates technical signals from your browser (such as IP address and device characteristics) to distinguish humans from bots, without tracking cookies and without cross-site tracking. Legal basis is my legitimate interest in protecting the site and controlling costs (Art. 6(1)(f) GDPR).
For rate limiting, your IP address is processed temporarily in server memory and is not stored permanently.
Hosting
The site is hosted on Vercel Inc. (USA). When you visit, Vercel processes technical connection data (IP address, browser type, time of request) in server logs as is standard for any website. Legal basis is my legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR).
Analytics
If I add usage statistics, it will be a cookieless, privacy-respecting service (Plausible or Vercel Web Analytics) that collects aggregated page statistics without identifying individual visitors and without cross-site tracking. This policy will be updated when that happens.
What I do not do
No advertising, no sale of data, no tracking cookies, no cross-site profiles. The site does not knowingly collect data from children.
International transfers
Some of the providers above are based in the USA. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses, plus data processing agreements with each provider.
Your rights
Under the GDPR you have the right to access the data I hold about you, to have it corrected or deleted, to restrict its processing, to object to processing based on legitimate interest, and to receive your data in a portable format. Email armita.banihashemi@gmail.com and I will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority; the one responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).