Privacy Policy

Gilles Maury, a self-employed individual (solution architect & freelance developer), based in Brussels, Belgium.

Business number (BCE/VAT): BE0670.778.061.

Contact: gilmry@gmail.com

This site collects personal data in three cases, all at your own initiative: when you fill in the contact form (name, email address, optional company name, message content), when you use the conversational quote assistant (whatever you type into it — potentially your name, a description of your project, or any other information you choose to share), and when you book a slot through the Calendly widget in the contact section (name, email, and whatever Calendly asks for to schedule the meeting — sent directly to Calendly, not to my server).

The site uses Plausible, a privacy-friendly analytics tool: it sets no cookies, collects no data that could identify you individually, and cannot track you across other sites. It aggregates anonymous statistics (page views, country, device type, traffic source) without ever storing your full IP address or any personal identifier. The site uses no other advertising or tracking cookies, and using the quote assistant or the booking widget is entirely optional.

To respond to your contact request, or to generate an indicative estimate via the quote assistant. No data is used for commercial or advertising purposes, nor resold or shared with third parties for prospecting purposes.

Legal basis: your explicit consent (Article 6.1.a of the GDPR) — given by ticking the dedicated box for the contact form, or by voluntarily starting a conversation for the quote assistant — as well as the legitimate interest in handling requests sent to us (Article 6.1.f).

Your data is hosted and processed by the following subprocessors, solely to operate the site, the contact form, the quote assistant, and the delivery of the final quote:

• Supabase (database), hosted in the European Union (Ireland).
• Resend (sends the email notification informing me of a new message), a US-based company, governed by GDPR-compliant standard contractual clauses.
• Vercel (site hosting), a US-based company, governed by GDPR-compliant standard contractual clauses.
• n8n Cloud (automation engine that runs the quote assistant), n8n GmbH (Germany), data hosted in the European Union (Frankfurt).
• Anthropic (the Claude AI model that generates the quote assistant's replies), accessed through my own API account rather than n8n Cloud's built-in offering — Anthropic acts here as my direct subprocessor. Its Data Processing Addendum (DPA), including standard contractual clauses for transfers outside the EU, is automatically incorporated into its commercial API terms of service.
• Google (Gmail to send the final quote, Google Docs to generate it, Google Sheets to track requests), through my personal Google account, a US-based company, governed by GDPR-compliant standard contractual clauses.
• Calendly (online scheduling), a US-based company. The plan in use does not offer EU data residency: your booking data is hosted in the United States, governed by standard contractual clauses and Calendly's self-certification under the EU-US Data Privacy Framework.
• Plausible (anonymous audience measurement), infrastructure hosted exclusively in the European Union (Germany, Finland, Slovenia) — your data never leaves the EU and cannot be used to identify you.
• YouTube (Google), only on blog articles that embed a video or a playlist. The player is loaded from YouTube's cookie-free domain, and only once it comes into your viewport: as long as you don't scroll down to it, no request is sent to Google. When it does load, your IP address is necessarily transmitted to Google, a US-based company, covered by standard contractual clauses compliant with the GDPR.

These providers only use your data to perform the requested service and only have access to it to that extent.

The chat assistant shown on the site (bubble in the bottom-left corner) is an automated system powered by artificial intelligence — it is not me answering directly. It says so from its first message.

It only provides an indicative, non-binding estimate: no decision producing legal effects concerning you is made automatically. You can always reach me directly — contact form, WhatsApp, phone, or email — to talk to an actual person.

Messages sent via the contact form are kept for a maximum of 24 months, then automatically deleted.

Conversations with the quote assistant pass through n8n Cloud and Anthropic: Anthropic's technical logs are automatically deleted after 7 days, and the content of your exchanges is never used to train their models.

The final quote generated at the end of the conversation then passes through my personal Google tools (Gmail, Google Docs, Google Sheets): this data is kept for a maximum of 24 months, same as contact form messages, then deleted.

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict the processing of, object to, and port your personal data.

To exercise any of these rights, contact me at gilmry@gmail.com. You may also lodge a complaint with the Belgian Data Protection Authority (APD/GBA): www.autoriteprotectiondonnees.be.

This site itself does not use any cookies beyond what is strictly necessary for basic technical operation, and does not display its own cookie consent banner. Only the private administration area (reserved for Gilles) sets a session cookie strictly necessary for authentication — public site visitors are never exposed to it.

If you use the quote assistant, it stores a session identifier in your browser's local storage (localStorage) — not a cookie, strictly speaking — solely to link messages within the same conversation. This stays on your device and is not used for tracking or advertising.

The Calendly booking widget sets its own cookies to function. Calendly displays its own consent banner to visitors covered by GDPR/CCPA before setting non-essential cookies — handled directly by Calendly, independently of this site.

The Plausible analytics tool sets no cookies at all — that's precisely what lets it run without a consent banner.

The YouTube players embedded in some blog articles use YouTube's cookie-free domain and only load once you scroll down to them: no advertising cookie is set unless you press play. If you do press play, Google may set its own cookies, under its own sole responsibility.