Privacy Policy

1. Introduction

This website is operated by Andrey Kovalev, based in Riga, Latvia. It serves as a personal portfolio and features an AI-powered chatbot for interactive exploration of my work and experience. This Privacy Policy explains what data is collected, how it is used, and what rights you have regarding your information.

2. Information We Collect

We collect minimal data, split into two categories:

Automatic (browser-side):

• Theme preference — stored in localStorage ("dark" or "light")
• Visitor ID — a random UUID stored in sessionStorage, cleared when you close the tab
• Chat data — messages, panel state, and cached AI insights stored in IndexedDB (the portfolio-agent database)

Voluntary (shared via AI chat):

If you choose to share personal details in conversation with the AI chatbot (such as your name, company, role, or contact information), the chatbot may store this data server-side. See Section 5 for details.

3. Local Storage Technologies

This site does not use traditional HTTP cookies. Instead, it uses browser-native storage mechanisms:

• IndexedDB — a browser database ("portfolio-agent") that stores your chat history, UI panel state, and cached AI-generated insights with a 1-hour TTL. This data persists until you clear your browser data.
• sessionStorage — holds a randomly generated visitor ID (UUID) used to associate your session with any voluntarily provided information. It is automatically cleared when you close the browser tab.
• localStorage — stores your theme preference ("dark" or "light") so the site remembers your display choice between visits.

All of these are stored locally in your browser. You can clear them at any time through your browser settings.

4. AI Chat Service

The interactive chatbot on this site uses a third-party AI API (such as xAI/Grok or another OpenAI-compatible provider) to process and respond to your messages. When you send a message:

• Your message and conversation history are sent to the AI provider for processing
• The AI provider may process and temporarily store this data according to their own privacy policies
• Responses are streamed back to your browser in real time

I do not control how the third-party AI provider handles data on their servers. If you are concerned about sharing sensitive information, please avoid including it in chat messages.

5. Visitor Data

When you voluntarily share personal details during a conversation, the AI chatbot may use its remember_visitor function to save the following information server-side:

• Name, company, and role
• Area of interest or reason for visiting
• Contact details (email, Telegram, phone, LinkedIn) if provided
• Freeform notes about the conversation

This data is stored in a server-side JSON file and is used solely by me to understand who is visiting my portfolio and to follow up on professional inquiries. It is not shared with or sold to third parties.

6. Third-Party Services

This site relies on the following third-party services:

• AI API Provider — processes chat messages. The specific provider may be xAI (Grok), OpenAI, Groq, or another OpenAI-compatible service.
• Vercel — hosts the website and handles server-side request processing. Vercel may collect standard server logs (IP addresses, request timestamps). See Vercel's Privacy Policy.

No analytics or tracking services (such as Google Analytics) are used on this site.

7. Data Retention

• Browser storage (IndexedDB, sessionStorage, localStorage) — you are in full control. Clear it at any time via your browser settings. sessionStorage is automatically cleared when you close the tab. Cached AI insights expire after 1 hour.
• Server-side visitor data — retained until manually deleted by me. You may request deletion at any time (see Section 8).

8. Your Rights

Under the General Data Protection Regulation (GDPR) and similar legislation, you have the following rights regarding any personal data I hold:

• Right of access — request a copy of any personal data stored about you
• Right to rectification — request corrections to inaccurate data
• Right to erasure — request deletion of your personal data
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to the processing of your personal data
• Right to restrict processing — request limitation of how your data is used

To exercise any of these rights, contact me at g.andry90@gmail.com. I will respond within 30 days.

9. Children's Privacy

This site is not directed at individuals under the age of 16. I do not knowingly collect personal information from children. If you believe a child has provided personal data through this site, please contact me and I will promptly delete it.

10. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in how the site works or to comply with legal requirements. Any changes will be posted on this page with an updated revision date. Continued use of the site after changes constitutes acceptance of the revised policy.

11. Contact

If you have any questions about this Privacy Policy or your personal data, reach out to: