Privacy notice

Controller

Yannick Seelig, Wetzikon ZH, Switzerland. E-mail: hello@seelig.ai.

For questions about data protection and to exercise your rights, contact me at this address.

In short

• →I use no tracking tools and no advertising cookies. For the chat I store the answered questions (see "Chat"), but no visits and no IP addresses.
• →There is a single cookie. It remembers your language.
• →What you enter yourself (contact form, booking, chat, website check) goes to service providers, mostly in the USA, so that the feature works. They are listed below.

Visiting the website and hosting

The website runs on Vercel Inc. (USA). With every request, Vercel processes the technically necessary data, in particular your IP address, the time, the requested address and details of your browser. Pages are delivered through Vercel's global network, and the server functions (contact form, chat, website check, call requests from AI assistants) run in the USA. The purpose is to deliver the website, keep it secure and fix errors.

Cookie and browser storage

I use no other cookies or tracking technologies.

• →Cookie "locale": stores your language choice (German or English) for 12 months. Only this website sets and reads it, and the language switch needs it.
• →Session storage (sessionStorage): one entry remembers whether you paused the animation on the homepage, "audit-result" keeps the result of your last website check so it is still there when you go back, and "seelig-chat-nudge" remembers that the pointer to the chat has already appeared. All are deleted when you close the tab.
• →Local storage (localStorage): "seelig-chat" keeps your chat history, the language and the conversation number so the conversation is still there on your next visit. "seelig-chat-notice" remembers that you confirmed the notice in the chat, "seelig-chat-wide" whether you chose the wide view. These entries stay until you delete them: in the chat under "My data" with one click, or in your browser settings. Your browser sends the chat history only when you send a message in the chat (see "Chat").

Contact form and e-mail

When you write to me through the form, I process your name, your e-mail address and your message to answer your inquiry. The form sends this information through the e-mail service Resend (Plus Five Five, Inc., USA) to hello@seelig.ai, with your address as the reply address. The website does not store your details in a database and does not write your name or e-mail address to the server logs.

E-mails to hello@seelig.ai are received by Cloudflare, Inc. (USA) and forwarded to my personal mailbox at Google (Gmail). The same applies if you write to me directly.

Booking a call

You book the first call through Cal.com (Cal.com, Inc., USA). I process what you enter in the booking form (name, e-mail address, your company website, notes and any additional guests) to prepare and hold the call. The call runs on Cal Video, the video service of Cal.com. Cal.com processes this data on my behalf.

If an AI assistant such as ChatGPT or Claude requests a first call on your behalf through my API or my MCP server, I receive your name, e-mail address, the requested time, the topic, and any notes and company website from that assistant. I send you an e-mail with a confirmation link through Resend. Nothing is booked until you confirm through that link. Then the details go to Cal.com, as with a direct booking. Your name, e-mail address, notes and website travel encrypted inside the link itself. I do not store them. At Vercel in Frankfurt I store the status, topic and time of the request, its timestamps and, once booked, the Cal.com booking ID, plus a hash of your e-mail address made with a secret key. To limit the number of requests, I also store hashes of your e-mail address, its domain and the IP address the request came from, made with the same key. I delete the hashes used for limiting within 3 days and the request record within 30 days. If you did not request anything, ignore the e-mail and nothing is booked.

Chat

The chat is an AI assistant that answers questions about my services. When you send a message, it goes to Anthropic together with the conversation so far (at most the last 24 messages, your messages up to 500 characters each, at most 12 questions per conversation) to generate the reply. Your browser keeps the history in local storage so it survives moving between pages and your next visit (see "Cookie and browser storage"). To improve the chat, I store every answered question: your question (at most 500 characters), the answer (at most 1500 characters), the page you asked on, the language, which question of the conversation it was, which cards the chat showed and a random conversation number your browser creates. E-mail addresses, phone numbers and IBANs are masked before storing. A second call to Anthropic assigns the question one topic from a fixed list, for example an offer, prices or booking. If you rate an answer with thumbs up or down, I store the rating and your optional note (at most 300 characters, also masked) under the same conversation number. Your IP address and your name are not stored. If you write names or other details into a question yourself, they are in the stored text. The entries are kept by Vercel in Frankfurt and deleted after 12 months. Apart from that, the server logs only technical data (model, token counts, duration, error type), never the content. Please do not enter confidential or sensitive information in the chat.

Website check

When you have an address checked, my server fetches that page, its robots.txt and up to 30 addresses linked from it, plus the page five more times with the user agent of a browser and of four AI bots. The address also goes to Google for PageSpeed Insights and the Chrome UX Report, and the domain name with the technical findings goes to Anthropic for the written analysis. For the question of what Claude says about the website, the domain name goes to Anthropic and its web search. The checked address may appear in the server logs at Vercel. If the address itself contains personal data, such as a name, that data is affected too.

Alongside this, my server reads up to 20 more pages of the website, found through the sitemap or the links on the home page, and fetches up to 30 internal addresses linked from them to find dead links. The text of these pages (at most 700 words per page) goes to Anthropic to find spelling, translation and date errors, as long as the daily limit for this text check is not reached. I store the report of this page check (checked addresses, findings, quoted text) at Vercel in Frankfurt so I can go through it with you in a booked call. Before storing it, I replace e-mail addresses, phone numbers and IBANs in quoted text with placeholders. It contains no data about you as a visitor, and I delete it after 90 days. If you book a call, the report number is in your booking.

If you enter your e-mail address, I receive an e-mail through Resend with your address, the checked website, the chosen language and the result you saw (score, findings, analysis). I use the address to send you concrete improvements for your website and to follow up on your reply. No newsletter, no sharing.

Website check in ChatGPT

The website check is also available as a ChatGPT plugin and as an MCP server for other AI assistants such as Codex. When an assistant calls it, I receive the address to check and the chosen language. I do not receive your conversation. What ChatGPT itself does with your input is governed by OpenAI's terms and privacy policy.

The fast check fetches the page, its robots.txt and up to 30 addresses linked from it. The full check reads up to 20 pages of the website and fetches up to 30 internal links. The home page address goes to Google for PageSpeed Insights, and the text of the pages (at most 700 words per page) goes to Anthropic to find spelling, translation and date errors, as long as the daily limit for this is not reached. Pages that the website's robots.txt closes to my checking crawler are not fetched.

I store the results of both checks (checked addresses, findings, quoted text) at Vercel in Frankfurt and delete them after 90 days. Before that, I replace e-mail addresses, phone numbers and IBANs in quoted text with placeholders.

To limit how many checks one person can run, I store a hash, made with a secret key, of the anonymous user number ChatGPT sends for this purpose, or, for calls from outside ChatGPT, such a hash of your IP address. I delete these hashes within 3 days. None of it is used for advertising.

Abuse protection

To prevent abuse, I limit the number of requests per IP address: contact form 3, website check 5, page check 5, Claude query in the website check 3, e-mail unlock 5 and chat 20 per hour. For this, the IP address is held only in the server's working memory. It is not stored in a database or in logs and is discarded when the server instance restarts. Call requests from AI assistants and the website check in ChatGPT have their own limits based on hashes, see "Booking a call" and "Website check in ChatGPT".

Spotify page

The "Spotify" page shows album and artist images that your browser loads directly from Spotify's servers (i.scdn.co). Spotify receives your IP address, browser details and the information that the request comes from www.seelig.ai. Links to tracks and artists lead to Spotify, where its privacy policy applies.

Recipients and transfers abroad

These service providers receive personal data. For the USA, Swiss law treats protection as adequate only for companies certified under the Swiss-U.S. Data Privacy Framework. For the others, the transfer relies on standard contractual clauses, as stated for each recipient.

I do not share your data for advertising and I do not sell it.

• →Vercel Inc., USA: hosting, server functions, logs, storage of the chat questions, the page check reports and call requests from AI assistants (Frankfurt region). Certified under the Swiss-U.S. Data Privacy Framework.
• →Plus Five Five, Inc. (Resend), USA: sending the contact form, website check and confirmation e-mails. Standard contractual clauses with the Swiss adaptations.
• →Anthropic Ireland, Limited, Ireland: chat replies and their topic assignment, the website check analysis, the text check of the subpages and the Claude query with web search. Data is stored in the USA, and processing can also run in other countries. Standard contractual clauses with a Swiss addendum. According to Anthropic, inputs and outputs are not used for training and are deleted within 30 days. If Anthropic flags content for a possible policy violation, it keeps it for up to 2 years.
• →Cal.com, Inc., USA: booking calls. Not certified under the Swiss-U.S. Data Privacy Framework. According to Cal.com, the transfer relies on standard contractual clauses.
• →Google LLC, USA, and Google Ireland Limited, Ireland: measurements for the website check. Google LLC is certified under the Swiss-U.S. Data Privacy Framework.
• →Cloudflare, Inc., USA: receiving and forwarding e-mails to hello@seelig.ai. Certified under the Swiss-U.S. Data Privacy Framework, plus standard contractual clauses.
• →Google LLC, USA: my mailbox (Gmail). Certified under the Swiss-U.S. Data Privacy Framework.
• →Spotify AB, Sweden: images on the Spotify page. Sweden has adequate data protection.

Retention

I keep personal data only as long as the purpose requires or the law demands. Of the website check I store only the page check report and the results of the website check in ChatGPT and delete them after 90 days, and the hashes used for limiting it within 3 days. Stored chat questions, answers and ratings are deleted after 12 months. I delete call requests from AI assistants within 30 days and the hashes used for limiting within 3 days. I keep e-mails from the contact form and the website check, and bookings, as long as your inquiry and any work together require.

Your rights

You can ask me at any time which personal data I process about you. You can also ask for a copy of your data in a common format, for incorrect data to be corrected and for your data to be deleted, and you can object to the processing. Write to hello@seelig.ai. I may ask you to confirm your identity.

If you believe I do not process your data correctly, you can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).

Visitors from the EU

Where the EU General Data Protection Regulation (GDPR) applies to you, I base the processing on steps prior to entering into a contract (Art. 6(1)(b) GDPR) for inquiries through the form, by e-mail or through a booking, and on my legitimate interest in a working and secure website (Art. 6(1)(f) GDPR) for hosting, security, chat and the website check. You also have the right to restrict processing and to lodge a complaint with the data protection authority of your country of residence.

Changes

I update this notice when the website or the services it uses change. The version published on this page applies.