Privacy Policy

Last Updated: September 30, 2025

1. Introduction

Welcome to Madina Gbotoe's professional portfolio. This privacy policy explains how we collect, use, and protect your information when you visit this website.

Data Controller: Madina Gbotoe
Contact: mgbotoe@gmail.com
Location: San Francisco Bay Area, California, USA

2. What Data We Collect

Automatically Collected Information

Data Type	Purpose	Retention	Legal Basis (GDPR)
IP Address	Rate limiting, abuse prevention	In-memory only (lost on restart)	Legitimate interest
Browser User-Agent	Technical troubleshooting	In-memory only	Legitimate interest
Page Views	Analytics (anonymous)	Vercel Analytics retention policy	Legitimate interest
AI Chat Messages	Provide AI assistant service, improve responses	In-memory only	Consent (by using feature)
Feedback Ratings	Service improvement	In-memory only	Consent (by submitting)

What We DO NOT Collect

❌ No cookies
❌ No persistent browser storage
❌ No email addresses (unless you contact us directly)
❌ No names or personal identifiers
❌ No tracking across websites
❌ No financial information

3. Third-Party Services

Vercel Analytics

We use Vercel Analytics for anonymous traffic analytics. This service does NOT use cookies and does NOT track individuals. Learn more

OpenAI (AI Assistant)

When you use the AI assistant, your questions are sent to OpenAI's API to generate responses. OpenAI's data usage policy applies. OpenAI Privacy Policy

Resend (Email Service)

Used for admin email notifications only. No user emails are sent. Resend Privacy Policy

4. Your Rights (GDPR/CCPA)

You have the right to:

Access: Request a copy of data we have about you (likely none, as we don't store persistent data)
Deletion: Request deletion of your data (automatically happens on server restart)
Rectification: Correct inaccurate data
Objection: Object to data processing
Portability: Receive your data in a portable format
Withdraw Consent: Stop using the AI assistant or leave the site

To Exercise Your Rights:
Email: mgbotoe@gmail.com
Subject: "Privacy Request"
Response Time: Within 30 days

5. Data Storage & Security

Storage Location

All data is stored in-memory on Vercel's servers (US-based). No persistent database is used. Data is lost when the server restarts (typically daily).

Security Measures

HTTPS encryption for all connections
Rate limiting to prevent abuse
No sensitive data storage
Regular security updates
0 vulnerabilities (audited regularly)

6. Data Sharing

We do NOT sell, rent, or trade your data. Period.

Data is only shared with:

OpenAI (for AI responses)
Vercel (hosting provider, analytics)
Resend (admin emails only)

7. Children's Privacy

This website is not intended for children under 16. We do not knowingly collect data from children.

8. International Data Transfers

This site is hosted in the United States. If you're accessing from the EU, your data may be transferred to the US. We rely on:

Vercel's EU-US Data Privacy Framework certification
Standard contractual clauses with service providers
Minimal data collection (reduces risk)

9. Cookies

This website does not use cookies. We use in-memory storage only.

10. Changes to This Policy

We may update this policy occasionally. Changes will be posted on this page with an updated "Last Updated" date.

11. Contact & Complaints

Privacy Questions:
Email: mgbotoe@gmail.com

EU Residents - Supervisory Authority:
You have the right to lodge a complaint with your local data protection authority. Find your authority

12. Legal Basis Summary

Processing Activity	Legal Basis
Website hosting & security	Legitimate interest (website operation)
Anonymous analytics	Legitimate interest (service improvement)
AI assistant responses	Consent (by using feature)
Rate limiting	Legitimate interest (abuse prevention)
Feedback collection	Consent (by submitting)

← Back to Portfolio | Contact | Last Updated: September 30, 2025