Application data and privacy

This notice explains what the public application and privacy-request forms collect, why the information is used, where it is stored, and how to request access, correction, or deletion.

1. Who handles the information

Pablo Cardozo is responsible for the information submitted through this site. The information is used to review applications, manage accepted engagements, respond to privacy requests, protect the service from abuse, and keep necessary records.

2. Application fields collected

The application collects full name, email, organization or project, optional website, country, target user, observed problem, existing evidence, riskiest assumption, decision needed, current stage, existing technical assets, industry, known competitors or conflicts, preferred engagement, timezone, broad availability, budget fit, exclusion confirmation, privacy consent, notice version, locale, submission reference, workflow status, and timestamps. Private review notes and a conflict flag may be added by the administrator.

3. Privacy-request fields collected

A privacy request collects full name, email, request type, optional details, consent, notice version, locale, submission reference, status, and timestamps. These requests are stored separately from applications.

4. Information not collected at application

The forms do not request tax identifiers, invoicing data, credentials, proprietary source code, uploads, or payment-card data. Fiscal and invoicing information may be requested after acceptance through a separate private process.

5. Storage and hosting

Form records are stored in a D1 database provided through OpenAI ChatGPT Sites. The platform and its infrastructure providers process the data needed to host and secure the service. A specific data-residency location is not guaranteed.

6. Purposes and use

Application data is used to evaluate fit, scope, exclusions, conflicts, and availability; communicate about acceptance or decline; manage payment and private scheduling after acceptance; perform an engagement; respond to rights requests; and prevent repeated or abusive submissions. The application consent and the requested pre-contract steps provide the basis for this processing, subject to applicable law.

7. Platform analytics

ChatGPT Sites may produce platform analytics and operational logs needed to operate, secure, and understand use of the hosted site. No third-party analytics package has been added by this site. The application does not store raw IP addresses for its own rate limiting.

8. Sharing and sale

Personal information is not sold. It may be processed by OpenAI ChatGPT Sites and infrastructure providers that support hosting, security, and storage. It may also be disclosed when required by law or needed to protect legal rights. This site does not collect payment-card data.

9. Retention and deletion

Rejected or inactive applications are scheduled for deletion after 180 days. Accepted applications may be retained for the engagement and for legal, accounting, or tax record obligations. Privacy requests are retained long enough to verify and document the response. An administrator can delete individual records. A legal obligation may require limited information to be kept despite a deletion request.

10. Security limits

Access to application records is restricted to an authenticated administrator allowlist. Reasonable validation, abuse controls, and access checks are used. No internet service can promise absolute security, so confidential source material and credentials should not be submitted.

11. International processing

Because the service and its infrastructure may operate across countries, information may be processed outside the country where it was submitted. Those locations may apply different data-protection rules.

12. Your choices and requests

A person may request access, correction, or deletion through the privacy-request form. Identity may need to be verified before a request is completed. A response may be limited when another legal obligation applies.