ANIVATAR / PRIVACY
Privacynotice.
How the contact form, Eva demonstration and data handling work on the current Anivatar website.
Data controller.
Krzysztof Kieszkowski, Anivatar, ul. Wał Miedzeszyński 414A/14, 03-994 Warsaw, Poland.
For privacy and personal data matters, write to privacy@anivatar.com. For Anivatar project enquiries, write to hello@anivatar.com.
Contact and the message form.
The form collects the subject, description of your enquiry and an email address or phone number. At least one contact detail is required; you can provide both. Selecting “Send message” sends these details to the website server for validation, then from your browser to FormSubmit, which emails hello@anivatar.com. Confirmation appears when FormSubmit accepts the submission; it does not confirm delivery to the inbox.
The message and contact details are processed through Sites hosting and FormSubmit (Devro LABS). Your browser’s connections to the website server and FormSubmit are encrypted using HTTPS. According to its documentation, FormSubmit retains submissions for 30 days. The people handling your enquiry can access the correspondence in the hello@anivatar.com mailbox hosted by home.pl. Information about FormSubmit’s data processing: https://formsubmit.co/privacy.pdf.
The application does not store the message or contact details in the website database. To prevent spam and duplicate sending, it stores a submission identifier, time, status, attempt count and protected digests of the submission and IP address. It does not store the IP address in plain text. These metadata are deleted on the next submission after seven days; infrastructure backups may remain longer.
If you enter an email address, the website server checks the domain’s mail configuration using Cloudflare’s DNS lookup service. Only the domain name is sent for this check, not the full email address or message. The check does not confirm that the mailbox exists or that you can access it. It does not change DNS settings.
Providing information is voluntary. Contact details allow us to reply to your enquiry. Do not include special categories of personal data or confidential information about other people in the description.
Conversation with Eva.
The current Eva concept is a text demonstration selecting prepared answers from the website. It is not connected to an external AI model and does not transmit entered messages to one. It does not activate a microphone or record voice.
Conversation content stays in the memory of the open page. Starting a new conversation removes it from the interface; refreshing or fully leaving the page starts a new session. The demonstrator does not save chat history in localStorage, cookies or on the server.
Eva does not place orders, operate customer systems or make decisions about a user. The materials illustrate possible applications. The scope of a production deployment is agreed separately. The Eva launcher is currently unavailable on the site.
Surveys and feedback.
Surveys are in preview mode. Your selections remain in the open page and are not sent to a database. Finishing the preview does not submit feedback.
Before each survey we show its current mode. The purpose is to learn about needs, preferences and concerns and to assess Anivatar concepts. Questions are voluntary. There are no free-text fields or requests for your name, your organisation’s name or contact details. Answers can be reviewed before submission.
If collection is enabled, a saved response contains a single-submission identifier, survey type and version, the assessed scenario, selected options and the date received. The identifier prevents duplicate writes on retry; it is not used to track someone across surveys. The survey application does not read or store IP addresses, account details, chat history, referrers or advertising profiles.
Hosting separately processes the technical data described above. We do not promise that events can never be connected within the infrastructure. The application does not join survey responses to accounts or sales contacts.
After activation, responses are stored in the Sites service database without public read access. Current analysis uses responses from the last 90 days; older records are deleted at a later write or operator cleanup. Infrastructure backups may remain longer.
In preview mode you can clear the form. Once responses are submitted, we do not request a respondent’s identity, so a database record cannot be located by name or email. For privacy matters contact privacy@anivatar.com.
Where information remains.
Messages in the demonstration exist for the page session. An unsent contact message remains in the memory of the open page. FormSubmit retains received submissions for 30 days according to its documentation. Sent correspondence and hosting logs are separate data categories; closing the page does not delete them.
Ask privacy@anivatar.com about the retention period, access to or deletion of specific correspondence. Data processing rules for any future agent deployment, including providers and processing locations, are agreed for that project.
Questions and your rights.
To the extent provided by the GDPR, you may request access to, correction or deletion of your personal data, or restriction of its processing. In certain cases you may also request portability or object to processing. If processing is based on consent, you may withdraw it.
To raise a matter about data supplied to Anivatar, email privacy@anivatar.com and describe the contact or information concerned. You may also complain to the President of the Polish Personal Data Protection Office (UODO).
More information is available from UODO and in the text of the GDPR.
Website analytics.
We compile our own aggregate page-view and link-click statistics to assess content and improve navigation. These cover the page, link destination and label, UTC day and hour, referring domain, website language, device and browser category, and approximate country and city where supplied by hosting. These statistics do not store IP addresses, form contents, URL parameters or people’s identities. We do not build individual visitor histories or advertising profiles.
Statistics are stored in the Sites database and are accessible only through a password-protected dashboard. We retain detailed counts for 90 days. We keep the total number of page views per hour across the whole site indefinitely to compare traffic from year to year. Infrastructure backups and separate hosting logs may remain longer. Our legitimate interest in maintaining and improving the website is the basis for processing necessary technical data. Analytics uses no cookies or persistent visitor identifier. We respect Do Not Track and Global Privacy Control signals. The choice below stores only a preference in this browser. Short-lived connection-data hashes help prevent abuse and are not used in reports about people. Only a logged-in administrator receives a technical session cookie lasting up to eight hours.
We also collect aggregate active-time statistics for pages. The timer runs while the tab is visible and the window is focused, pauses after 60 seconds of inactivity and records up to four hours per page view. Updates are sent approximately every 15 seconds and when leaving the page. We do not record typed text or mouse-movement trails. A random identifier for one page view exists in the open page’s memory and does not link visits across pages. Temporary timer state is valid for 24 hours, and the duplicate-prevention identifier for 48 hours. Expired records are removed during periodic cleanup or when a report is requested. Aggregate times and duration ranges follow the analytics retention period described above. Measurement is approximate and respects the same privacy preferences as the other analytics.
