Privacy and cookies

Data controller

Markai Studio di Carlos Ortega, Via Marco Emilio Lepido 2, 42122 Reggio Emilia (RE), P.IVA 03133020358, info@markaistudio.it, PEC carlos@ionospec.it

If you email us

We use your email address and what you write only to reply and, if you ask, to prepare a proposal. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). We keep the correspondence for as long as needed to handle the request and, if no relationship follows, for no more than 24 months.

Our mailbox is hosted by Aruba S.p.A. (Italy). Incoming emails are also read and sorted by our in-house AI assistant, which uses Anthropic PBC (United States) models under the same terms described for the chat; replies are always decided and sent by a person.

If you request a proposal

You can ask us for a proposal at the end of the scanner or with the short form on the site (for example «Want one for your company?» or «Ask for a proposal»): you leave your name, email, company and, depending on the form, what the business does, what you need, phone or a note. We receive them by email (from the scanner, together with the analysis of your website and your answers); you get a confirmation email. We use them only to prepare the proposal and reply. Name and email are needed to reply: without them we can't send you the proposal; the other details only help us understand what you need, and phone is always optional. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). Retention: as for emails, at most 24 months if no relationship follows. Sending goes through Resend Inc. (United States), with the safeguards provided by the GDPR.

The scanner

When you enter a website address, we read its public page to show you what could be automated. We don't store the result or the address in any archive: they only remain in the server's technical logs for a short period.

To write the analysis, the page's public text is processed by an Anthropic PBC (United States) artificial intelligence model, which does not use it for training. The analysis text is AI-generated: it may contain inaccuracies, and the final proposal is prepared by a person.

To prevent abuse we count how many analyses, chat messages and requests each visitor makes per day using a pseudonymous code (hash), derived from the IP address, that changes every day and is deleted after about 24 hours. The counter is stored by Upstash Inc. (United States), with the safeguards provided by the GDPR. Legal basis: legitimate interest in protecting the service (Art. 6(1)(f) GDPR).

The chat

The chat is an artificial intelligence assistant, not a person. The questions you type are sent to Anthropic PBC (United States), the model provider, only to generate the reply. We don't store conversations. Anthropic doesn't use this data to train its models and keeps it for a limited period under its own policy. The transfer to the United States relies on the safeguards provided by the GDPR (standard contractual clauses or the Data Privacy Framework).

Please don't share sensitive data in the chat (health, ID documents, bank details). If you want us to contact you, the chat prepares an email that you decide whether to send.

Proposals and payments

If you accept a proposal, we record the name of the person accepting, date and time and the version of the terms: they prove the contract and we keep them for 10 years, as required for accounting records. Payments go through Stripe (Stripe Payments Europe, Ireland): Stripe handles your card details and we never see them. Legal basis: performance of the contract and legal obligations (art. 6.1.b and 6.1.c GDPR).

Hosting

The website is hosted by Vercel Inc. (United States), which logs technical data such as IP address and browser type for security and operation, for a limited period. From your IP address Vercel only tells us your country, which we use to show prices in your currency and do not keep. This transfer also relies on the safeguards provided by the GDPR.

Transfers outside the EU

Vercel, Anthropic, Resend and Upstash are based in the United States. Transfers rely on the European Commission's standard contractual clauses (Art. 46 GDPR) in their data processing agreements and, for certified providers, also on the EU-US Data Privacy Framework (Art. 45 GDPR). You can ask us for a copy of these safeguards by writing to " + "info@markaistudio.it" + ".

Cookies

This website uses no profiling, analytics or third-party cookies and does not track you, so we don't ask for consent with a banner. Fonts are served from our own website, with no calls to Google.

Your rights

You can ask us at any time to access, correct or delete your data, restrict or object to its processing, or receive it in a portable format (Arts. 15–22 GDPR), by writing to info@markaistudio.it. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

You can object at any time to processing based on legitimate interest, such as the anti-abuse counter (Art. 21 GDPR).