Privacy

Privacy statement

Last updated: 27 October 2026

I'm careful with your data: I only collect what's needed to answer you, run the demos and prevent abuse. No tracking cookies, no ads, no selling of data. Below you can read exactly what happens.

Who is responsible?

Izelaar AI (sole proprietorship of Mitchell Izelaar), Dutch Chamber of Commerce (KVK) 77246292, based in Hendrik-Ido-Ambacht, the Netherlands. Privacy questions can be sent to info@izelaarai.nl.

What data, for what purpose and for how long

Contact form

Data: Your name, email address and message.
Purpose: To answer your question and schedule an intake if you want one.
Legal basis: Your request for contact (and possibly preparing an agreement afterwards).
Where: Your message is not stored on the website. It is sent as an email via Resend (delivery, servers in the EU) to my mailbox at Strato.
Retention: Up to 1 year. If it leads to an assignment, I keep the correspondence as long as the legal (tax) retention obligation requires, usually 7 years.

AI demos

Data: The text you type or paste into a demo.
Purpose: To generate the answer, the assessment or the extracted data.
Legal basis: You use the demo yourself; I have a legitimate interest in showing what AI can do.
Where: The text is sent to Anthropic (Claude, United States), which generates the answer. The website does not store your text.
Retention: The website: not at all. Anthropic deletes API inputs and outputs within 30 days by default and does not use them to train models. So please don't enter personal data or confidential information into a demo.

Preventing abuse (rate limiting)

Data: A non-reversible code (hash) of your IP address and a daily counter. Your IP address itself is not stored; the code is made with a secret key and changes every day.
Purpose: To prevent the demos, the contact form and the admin login from being abused or costing too much.
Legal basis: Legitimate interest (security and cost control).
Where: Database at Neon, in the EU (Frankfurt).
Retention: 30 days, then deleted automatically.

Visitor statistics and hosting

Data: Anonymised page visits (without cookies) and technical server logs, including your IP address.
Purpose: To see which pages are visited and to keep the website secure and working.
Legal basis: Legitimate interest.
Where: Vercel (hosting and Web Analytics, United States).
Retention: According to Vercel's retention periods; the statistics contain no data that lets me recognise you.

Cookies

This website uses no tracking, advertising or marketing cookies, and therefore no cookie banner. It does set a few functional cookies that it needs to work properly: one that remembers your language choice (Dutch or English), and two small security cookies from the admin panel's login system (against forged requests). They contain no personal data and are not used to follow you. When the administrator logs in, a session cookie is added; as a visitor you don't get one.

Who helps me with this (processors)

I work with these parties: Vercel (hosting), Neon (database, EU), Resend (email delivery, EU), Strato (email) and Anthropic (AI for the demos). Processing agreements with them apply through their terms. Vercel, Resend and Anthropic are US companies; transfers to the US are based on the safeguards the GDPR provides for this, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

What I don't do

I don't sell data, don't use it for advertising and don't make automated decisions about you based on your data.

Your rights

You may ask which data I hold about you, have it corrected or deleted, object to its processing or have it transferred. Email info@izelaarai.nl; I'll respond within a month. If you disagree with how I handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

If anything changes in how the website handles data, I'll update this statement. The date at the top shows when that last happened.