Privacy notice

Controller

Nikita Maslo is the controller. Inverk is a brand and project run by Nikita Maslo; it is not a registered business. Contact: reach@inverk.tech.

Requests sent through the forms

When you send the project form or the consultation form, we process what you enter: name, email and/or phone, preferred time, service, description, website, language and, for the form inside the assistant, the assistant conversation.

The purpose is to answer your request and, if relevant, prepare an offer. When you ask on your own behalf, the basis is taking steps at your request before a possible contract (GDPR Art. 6(1)(b)). When you contact us on behalf of a business, the basis is our legitimate interest in answering that business (Art. 6(1)(f)).

We do not use the information for marketing, and no marketing consent is needed to send a request.

The AI assistant

Messages you write to the assistant are sent from our server to OpenAI to generate a reply. We ask OpenAI not to store the response (store: false), but that does not mean OpenAI keeps nothing: under OpenAI's own API policies, data may still be retained for a limited time, for example to detect abuse.

Ordinary chats are not intentionally stored in the website's database; the browser copy stays in this tab until you clear the chat or close the tab. If you send the consultation form inside the assistant, the conversation is saved with that request and follows the request retention period. “Clear chat” deletes only the browser copy, not submitted requests or provider logs. The hosting platform (Lovable) and OpenAI may keep their own operational and security logs under their current terms and settings; see lovable.dev/privacy and OpenAI's terms. The basis is our legitimate interest in answering questions about our services (Art. 6(1)(f)), or pre-contract steps when you ask about a specific project (Art. 6(1)(b)).

The assistant can make mistakes and its replies are not binding. Do not share sensitive information, such as health details, or passwords.

Technical operation and security

To limit abuse, the server keeps your IP address in memory for up to one hour to count requests. It is not saved in the database. Our own code does not write message content to error logs, but the hosting platform may keep its own logs (see the AI assistant section). The basis is our legitimate interest in a secure website (Art. 6(1)(f)).

Fonts are served from this website, not from Google.

Visit statistics

The site uses the hosting platform's (Lovable) built-in visit statistics. According to the provider, it measures overall traffic and does not build profiles of individuals. We have not been able to verify exactly what the script collects or whether it stores anything on your device.

Recipients and processors

Lovable (hosting, website and database), OpenAI (assistant replies) and Telegram (a notice to us that a new request has arrived). Telegram notices do not include the content of the request; we read it in a restricted-access panel. Notices sent before this change could include the content; they remain in Telegram until removed manually and are not deleted automatically.

Providers may process data outside the EU/EEA. According to Lovable's privacy policy, processing countries include the United States (lovable.dev/privacy); Lovable's data processing agreement refers to adequacy decisions or other safeguards, including EU Standard Contractual Clauses (SCCs), for transfers outside the EEA (lovable.dev/data-processing-agreement). OpenAI's data processing addendum refers to SCCs (openai.com/policies/data-processing-addendum). Telegram: telegram.org/privacy. Each provider's current terms apply.

Retention

Requests that do not lead to an assignment are deleted automatically 90 days after our last communication with you. Deletion runs daily.

If you become a client, we keep the information as long as the assignment and the law require. Details are agreed in the written offer.

The browser copy of the assistant conversation is deleted when you clear the chat or close the tab. A conversation sent with a request follows that request's retention.

Your rights

You can ask for access, rectification, erasure, restriction and data portability, and you can object to processing based on legitimate interest. Write to reach@inverk.tech.

You can also complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).