Back to Home

Privacy Policy

Last updated: January 18, 2026

Introduction

This Privacy Policy explains how Roy Abes ("I", "me", or "my") collects, uses, and protects your personal information when you visit my portfolio website and use the AI-powered chatbot feature ("Ask About Me"). I am committed to protecting your privacy and being transparent about my data practices.

Information I Collect

Information You Provide

  • Contact Information: Email address, name, and company name when you submit inquiries or use lead capture forms
  • Chat Messages: Questions and messages you send through the AI chatbot
  • Professional Information: Job descriptions, role titles, and project requirements when using assessment tools
  • Form Submissions: Any information you voluntarily provide through contact or assessment forms

Information Collected Automatically

  • IP Address: Collected and immediately hashed (encrypted) for rate limiting and abuse prevention. The original IP address is not stored.
  • Browser Information: User agent string to detect automated access
  • Usage Data: Pages visited, referrer URL, and interaction timestamps
  • Theme Preference: Your light/dark mode preference stored locally in your browser

How I Use Your Information

  • Respond to Inquiries: Answer your questions through the AI chatbot and follow up on business inquiries
  • Provide Services: Process fit assessments, partnership inquiries, and project scoping requests
  • Improve the Service: Analyze usage patterns to improve chatbot responses and user experience
  • Prevent Abuse: Detect and prevent spam, automated attacks, and malicious activity
  • Comply with Legal Obligations: Maintain records as required by law

AI-Powered Features

This website uses artificial intelligence to power the chatbot feature. When you interact with the chatbot:

  • Your messages are processed by OpenAI's language models to generate responses
  • Conversations are stored to maintain context within a session
  • AI responses are generated based on my knowledge base and may not always be accurate
  • I do not use your conversations to train AI models

Important: AI-generated responses are provided for informational purposes only and should not be considered professional advice.

Third-Party Services

I use the following third-party services to operate this website:

  • Supabase: Database hosting and authentication (data stored in AWS US regions)
  • OpenAI: AI language model for chatbot responses
  • Vercel: Website hosting and deployment

Each of these services has their own privacy policies. I encourage you to review them.

Data Retention

  • Chat Sessions: Retained for 12 months, then automatically deleted
  • Contact Information: Retained until you request deletion or 24 months of inactivity
  • Abuse Logs: Retained for 90 days for security purposes
  • Rate Limit Data: Retained for 30 days

Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data I hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data
  • Portability: Request your data in a portable format
  • Objection: Object to processing of your personal data

To exercise any of these rights, please contact me at roy.abes@gmail.com.

California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information is collected about you
  • Know whether your personal information is sold or disclosed and to whom
  • Say no to the sale of your personal information
  • Access your personal information
  • Request deletion of your personal information
  • Not be discriminated against for exercising your privacy rights

I do not sell your personal information.

European Residents (GDPR)

If you are in the European Economic Area (EEA), my legal basis for processing your personal data includes:

  • Consent: When you voluntarily provide information through forms
  • Legitimate Interest: For security measures and service improvement
  • Contract: When necessary to provide requested services

You have the right to withdraw consent at any time by contacting me.

Data Security

I implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (HTTPS)
  • IP address hashing to prevent identification
  • Row-level security on database tables
  • Rate limiting to prevent abuse
  • Regular security reviews

Cookies and Local Storage

This website uses minimal cookies and local storage:

  • Theme Preference: Stored in localStorage to remember your light/dark mode choice
  • Authentication: Cookies used for admin authentication only

I do not use tracking cookies or third-party analytics.

Children's Privacy

This website is not intended for children under 16 years of age. I do not knowingly collect personal information from children. If you believe I have collected information from a child, please contact me immediately.

Changes to This Policy

I may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the website after changes constitutes acceptance of the updated policy.

Contact Me

If you have questions about this Privacy Policy or your personal data, please contact me at:

Email: roy.abes@gmail.com