Privacy Policy

This site collects very little personal information. There are no accounts, no newsletters, no advertising trackers, and no cookies set by this site’s application code. If you send a message through a form, the details you enter are emailed to me so I can reply. If you use the AI chat, what you type is sent to OpenAI to generate an answer. The site also processes limited technical data for analytics and security, described below.

As an individual engaged in commercial activity in British Columbia, I handle personal information in line with BC's Personal Information Protection Act (PIPA) and, where personal information crosses provincial or national borders, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). I am the person responsible for this site's privacy practices and can be reached at the contact below.

• Contact and inquiry forms — your name, email address, optional organization, and message are sent to me by email so I can respond. They are not stored in a database on this site.
• Business challenge tool — the details you enter about a workflow problem, plus your name and email if you choose to share them, are emailed to me the same way.
• “Ask Dan” AI chat — the messages you type are sent to OpenAI to generate a reply. The site does not save your conversation. If you choose to send the transcript by email using the consent checkbox, it is emailed like any other form message.
• Site analytics — a self-hosted Umami instance (stats.danspelt.com) receives page-view requests and a small allowlist of event names and properties (for example, which call-to-action was clicked). The site does not intentionally send form content, names, or email addresses as analytics events. Request metadata such as IP address and browser information may be processed by the analytics server to operate the service, even though the analytics script does not use cookies.
• Technical logs and abuse prevention — the site’s hosting infrastructure may record standard request data (such as IP address, browser information, and timestamps) for security and operations. A short-lived, in-memory rate limiter uses a client IP address as a key to deter form abuse; its entries expire after the configured window and are not saved in the site database.

By submitting a form or using the AI chat, you consent to the information you enter being used for the purposes described above. Please don't include sensitive personal information (health, financial, or identity details) in messages — it isn't needed and isn't wanted.

Two third-party processors handle limited information on my behalf: Resend delivers form submissions to my inbox, and OpenAI generates AI chat replies from the text you provide. Both may process data in the United States, where it is subject to that jurisdiction's laws. The site itself is hosted on a virtual private server managed through Coolify. Links to external sites (such as GitHub, LinkedIn, or live project demos) take you to services with their own privacy practices.

Message emails are kept as needed to handle our correspondence and any resulting work, subject to legal, accounting, or dispute-related needs. Analytics reports are used to understand site use, not to identify visitors. Hosting and analytics logs are retained according to the relevant service configuration; I do not promise a fixed period here. You can ask me to delete correspondence, subject to any information I must retain.

The site is served over HTTPS, form inputs are validated and rate-limited, and collection is limited to what each feature actually needs. No method of transmission or storage is perfectly secure, but the amount of personal information at risk here is deliberately kept small.

You may request access to, correction of, or deletion of your personal information, or withdraw consent for future contact, by emailing me. If you believe your concern hasn't been resolved, you may contact the Office of the Information and Privacy Commissioner for British Columbia, or the Office of the Privacy Commissioner of Canada for matters under PIPEDA.

This site is a professional portfolio and is not directed at children. I do not knowingly collect personal information from children.

If this policy changes, the updated version will be posted here with a new date. Privacy questions and requests: danspelt24@gmail.com or the contact form.