Privacy Policy
This policy explains how personal data is collected and used on kzf.ai, in line with the EU General Data Protection Regulation (GDPR) and Latvian data-protection law. The site sets no cookies and uses cookieless analytics, so there is no consent banner.
Who is responsible
The data controller is [Legal name], [Street, postal code, Riga, Latvia]. For any privacy request, email kristaps@kzf.ai.
What data is collected, and why
Contact form
When you submit the contact form, I process your name, email, optional company, and message. The legal basis is taking steps at your request prior to a possible engagement (GDPR Art. 6(1)(b)) and my legitimate interest in responding to enquiries (Art. 6(1)(f)). Basic anti-spam signals (a timing check and a hidden honeypot field) are processed to keep the form usable.
Booking
When you book a call, the booking is handled by Cal.com, which processes your name, email, and scheduling details so the meeting can take place (Art. 6(1)(b)).
Server logs and analytics
The host processes standard technical request logs. Aggregate, cookieless usage metrics are collected to understand traffic; these do not identify you individually (Art. 6(1)(f)).
Who processes the data
Data is handled by the following processors, engaged under data-processing terms:
| Processor | Purpose | Location | Data |
|---|---|---|---|
| n8n (self-hosted on Hetzner) | Contact-form intake and workflow automation | Germany (EU) | Name, email, company, message |
| Google (Google Sheets, Gmail) | Lead log and email delivery | EU / United States | Name, email, company, message |
| Cal.com | Booking and scheduling | United States | Name, email, booking details |
| Vercel | Website hosting and cookieless analytics | United States | Technical request logs, aggregate usage metrics |
International transfers
Contact-form intake runs on a server located in Germany (EU). Some processors (Google, Cal.com, Vercel) are based in the United States, so your data may be transferred outside the EEA. These transfers rely on appropriate safeguards under GDPR Chapter V, such as the European Commission's Standard Contractual Clauses and, where applicable, certification under the EU-US Data Privacy Framework.
How long data is kept
Enquiry and booking data is kept for as long as needed to respond and, if we work together, for the duration of that engagement plus any period required by law. You can ask for earlier deletion at any time.
Your rights
Under the GDPR you have the right to:
- access the personal data held about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing;
- receive your data in a portable format.
To exercise any of these, email kristaps@kzf.ai. You also have the right to lodge a complaint with the supervisory authority, the Data State Inspectorate (Datu valsts inspekcija, DVI), Latvia.
Changes
This policy may be updated as the site or its processors change. Last updated 10 August 2026.