This policy describes what personal data we process in connection with the operation of asistudio.ai, for what purposes, and what rights data subjects have.
1. Data controller
The controller of personal data is ASI.studio Artur Sinderman, based in Gdańsk, Poland (hereinafter: ASI.studio).
Contact for all matters concerning personal data: contact@asistudio.ai.
2. What data we process and why
We only process data that you provide to us voluntarily:
- Contact form — name, e-mail address, message content. Purpose: responding to your enquiry and further correspondence.
- Consultation booking (Cal.com) — name, e-mail address, selected time slot. Purpose: scheduling and holding the call.
- AI assistant (chat and voice) — in chat, the content of the conversation; in voice, the phone number and the course of the call. Purpose: answering questions about our services and scheduling consultations (details in section 6). If you use the “Send this conversation” button in the chat — your name, e-mail address or phone number, and the conversation transcript. Purpose: getting back to you about the matter you asked about.
- E-mail and phone correspondence — data provided in its course. Purpose: handling the matter you contact us about.
3. Legal bases for processing
We process data in accordance with the GDPR, on the following bases:
- Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract (responding to an enquiry, scheduling and holding a consultation),
- Art. 6(1)(a) GDPR — consent, to the extent it has been given (e.g. in the contact form and when sending a chat conversation to us),
- Art. 6(1)(f) GDPR — the controller's legitimate interest: ongoing communication, ensuring the security of our services, and establishing or defending potential claims.
4. Data recipients
We never sell personal data or share it for marketing purposes. Access to data — solely to the extent necessary to provide the services — may be granted to providers acting on our behalf:
- Vercel — website hosting and cookieless traffic analytics,
- Formspree — contact form processing and chat conversations sent with the “Send this conversation” button,
- Cal.com — consultation booking calendar,
- language model providers for the AI assistant (Vercel AI Gateway, Anthropic),
- providers of telecommunications infrastructure and speech processing for the voice assistant (including Twilio and ElevenLabs).
Some providers may process data outside the European Economic Area — only with the safeguards required by the GDPR, in particular standard contractual clauses.
5. Data retention
We keep data no longer than necessary for the purpose for which it was collected:
- correspondence and form data — for the time needed to handle the matter, and then for the period necessary to establish or defend potential claims,
- booking data — for the time needed to handle the consultation and any further cooperation,
- chat assistant conversation content — not stored by us,
- a conversation sent with the “Send this conversation” button — like correspondence: for the time needed to handle the matter, and then for the period necessary to establish or defend potential claims,
- recordings and transcripts of voice assistant conversations — a maximum of 90 days (section 6).
6. AI assistant — chat and voice
The website runs an AI assistant in two channels: a text chat and a voice conversation. Both draw on the same knowledge base about our services and answer solely on that basis.
Text chat. The content of the conversation is passed to the language model provider in order to generate a reply and is not stored on our side — we keep no archive of chat conversations and no transcripts. Replies are served without caching. Technical logs may retain service error messages; these contain no conversation content. If you would like us to get back to you, click “Send this conversation” below the chat and leave your name and e-mail or phone, confirming your consent — only then is the transcript sent to our mailbox via Formspree, the same route as the contact form. Without that click, nothing reaches us.
Voice conversation. Calls may be recorded and transcribed solely to assure service quality and improve the system; they are not used for marketing. Recordings and transcripts are permanently deleted no later than 90 days after the call.
Bot protection. Requests sent from the chat are verified as coming from a person rather than a program. The verification relies on technical browser signals and requires no personal data.
Data minimisation. The assistant does not ask for data beyond what is necessary to handle your matter. Please do not share special-category data in the conversation, in particular health data — the assistant will ask you not to provide it if it appears.
Booking. If we propose a meeting time during the conversation, the booking is made through Cal.com and requires your confirmation. The assistant sends no message on your behalf.
7. Rights of data subjects
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy of it,
- rectify your data,
- erase your data,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time — without affecting the lawfulness of processing carried out before its withdrawal,
- lodge a complaint with the President of the Polish Personal Data Protection Office (PUODO).
Requests concerning your data should be sent to contact@asistudio.ai.
8. Automated decision-making and profiling
We do not make decisions based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you. We do not carry out marketing profiling.
9. Cookies
The asistudio.ai website does not use tracking or marketing cookies.
- Visit statistics are collected without cookies (Vercel Web Analytics) — the data is aggregated and does not allow the identification of any individual.
- The site may store a technical cookie that remembers your selected language version.
- The contact form (Formspree) and the booking calendar (Cal.com) process data only when you voluntarily use them.
- Embedded widgets (e.g. the calendar) may store in the browser (localStorage) only technical information necessary for their operation.
10. Changes to this policy
If the scope of our services or the list of providers changes, we will update this document. The current version is always published at asistudio.ai/prywatnosc.
Last updated: 2026-09-05