~/privacy

What happens to your data here, every flow named.

Most privacy pages are written to be skipped. This one is written to be checked: every place your data comes in, where it goes, who processes it and how long it stays. If something on this site does not match this page, this page is wrong, and we want to hear it.

dpo@meihuizen.ai

~/short-version

The short version.

analytics: Google Analytics loads only after you click "Accept". Until then nothing from Google loads and no analytics cookie is set.
fonts: Served from this site. No request to Google Fonts.
agent fritz: Your conversation is processed to answer you, not stored. The server keeps counts, not content, unless you send a request.
requests: What you type into a scan or contact form reaches our mailbox and stays there for six months, unless it turns into a working relationship.
never: No advertising cookies, no selling or sharing of data, no profiling.

~/who-we-are

Who is responsible.

controller: MB Meihuizen AI (Mažoji bendrija Meihuizen AI), company code 308157412, Laisvės al. 110, LT-44253 Kaunas, Lithuania.
privacy contact: dpo@meihuizen.ai for every request about your data: access, correction, deletion, objection. General questions: info@meihuizen.ai.
scope: This page covers meihuizen.ai, Agent Fritz on this site, the contact form and Second Audience scans. Five, our sales app, gets its own privacy notice before it takes paying customers.

~/every-flow

Every flow, one row each.

One row per flow: what is collected, where it goes, how long it stays, and why we are allowed to.

visiting a page: Your IP address, browser and the page you ask for reach GitHub Pages, which hosts the site and keeps server logs under its own terms.basis: legitimate interest (running and securing the site)
your choices: Your light/dark theme and your cookie choice are stored in your own browser (localStorage). They never leave your device.basis: needed for what you asked for
analytics: Only after "Accept": Google Analytics 4 sets _ga cookies and sends page views to Google. IP addresses are not logged or stored by Google Analytics 4. Google keeps the data for [check: retention period set in the GA4 property]. Change your mind any time: . A later reject deletes the cookies.basis: your consent
agent fritz: Each question and the conversation so far go to our function on Vercel, region Frankfurt, and from there to the Anthropic API (model Claude Haiku) to write the answer. Our server logs counts (language, page, timing), never the text. Anthropic deletes API inputs and outputs within 30 days, or keeps them up to 2 years if its safety systems flag a conversation. The conversation itself lives in your browser tab (sessionStorage) and is gone when you close it. Your IP address is held briefly in memory to limit abuse and is never written anywhere.basis: legitimate interest (answering the question you asked)
scan and contact requests: What you type (name, company, email, phone, domain) and the chat that led to it are emailed to our mailbox at Proton, and you get a confirmation email. A short version (your details, your first question, the page you were on and your local time) also goes to Nico's phone as a Telegram message, so he sees it straight away. We keep both for six months. If it turns into a working relationship, it becomes part of that and is kept as long as the relationship needs.basis: steps you asked for before a contract
live chat with nico: If Agent Fritz offers to bring Nico into the chat and you say yes, Nico gets a Telegram message with the last few messages of your chat. While he is in, what you type goes to his phone through Telegram, and what he types comes back to you. The messages are held in our store (Upstash, region Frankfurt) only while the chat lasts and are deleted automatically within a day; the Telegram copies follow the same rule as other requests.basis: steps you asked for before a contract
contact form: Name, email and message are sent through a Vercel function to our Proton mailbox. Kept for six months, same rule as above.basis: legitimate interest (answering you)
second audience scan: The scan reads your public web pages, which is business content, not personal data. After a free scan we keep only the report and delete the raw captures. For paying clients we keep the raw captures for as long as the engagement needs them for re-scans.basis: steps you asked for before a contract, then the contract
booking a call: If Agent Fritz books a call for you, your name, email address and the time go into Nico's Google Calendar (Google Workspace), which sends you the invite with a Google Meet link. Nico's phone gets a short Telegram message about it, as with other requests. The appointment stays in the calendar as the record of the call.basis: steps you asked for before a contract

~/processors

Who processes it, and where.

Every company that processes personal data for this site, and where.

GitHub: Hosting (GitHub Pages). GitHub Inc., United States.
Vercel: Functions for Agent Fritz and the contact form, run in Frankfurt. Vercel Inc., United States.
Anthropic: The model behind Agent Fritz. Anthropic PBC, United States.
Proton: Email. Proton AG, Switzerland.
Upstash: Short-lived storage for live chats with Nico, deleted within a day. Upstash Inc., United States; data stored in Frankfurt (EU).
Telegram: Notifications of scan and contact requests, and live chats, on Nico's phone. Telegram Messenger Inc., British Virgin Islands; for accounts registered in the EEA, Telegram stores the data in the Netherlands.
Google: Calendar and Google Meet for calls booked through Agent Fritz (Google Workspace), and analytics, only with your consent. Google Ireland Ltd, with processing in the United States.

Transfers outside the EU rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses, and for Switzerland on the Commission's adequacy decision. Telegram is the exception: it offers no data processing agreement for messages sent through a bot. That is why we use it only here, for Nico's own notifications, and never in what we build for clients. [check: each processor's DPA and transfer basis]

~/your-rights

What you can ask for.

ask: You can ask what we hold about you, have it corrected or deleted, restrict or object to its use, or get it in a portable format. Email dpo@meihuizen.ai; we answer within one month.
withdraw: Consent for analytics can be withdrawn at any time with the Cookie settings button above, reachable from the contact page and the cookie banner.
complain: To the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, 10312 Vilnius, vdai.lrv.lt, or to the authority where you live.
no automation: Nothing on this site makes decisions about you. Agent Fritz answers questions; a person reads every request.

~/changes

When this page changes.

Last updated 2 October 2026. When a flow changes, this page changes with it, and the date moves.