Privacy policy
Datenschutzerklärung · Last updated [date]
This page explains what personal data this website and its AI assistant ("Sofia") process, why, and what rights you have under the EU General Data Protection Regulation (GDPR). In short: there is no advertising or analytics tracking, and data is only used to answer your questions, arrange meetings and reply to messages.
1. Who is responsible
Sanjai Lenin[Street and house number, postcode] Berlin, Germany
Email: sanjailenin29@gmail.com
2. Visiting the website (hosting and server logs)
The site is hosted by [hosting provider, company name and country]. When you open it, your browser sends technical data (IP address, date and time, page requested, browser type). This is needed to deliver the site, keep it secure and prevent abuse; for example, IP addresses are briefly kept in memory to limit how many messages can be sent. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR). Server logs are deleted after [e.g. 14 days, check your host's default].
3. Chatting with Sofia (AI assistant)
When you type or say something to Sofia, your message and the conversation so far are sent to Anthropic PBC (USA), whose Claude model generates the reply. Anthropic acts as a processor. The website itself does not store your chat; it stays in your browser tab and disappears when you close it. Anthropic may keep API data for a limited time for safety and abuse monitoring: [check and state Anthropic's current API retention period]. Please don't share sensitive personal information in the chat.
Legal basis: legitimate interest in answering visitors' questions about my work (Art. 6 (1) (f) GDPR), and steps prior to a possible employment or contract (Art. 6 (1) (b) GDPR).
Voice
- Sofia speaking: the text of Sofia's replies is converted to speech by ElevenLabs ([company and country, check]). Only Sofia's text is sent, not your voice.
- You speaking: the microphone button uses your browser's built-in speech recognition. In Google Chrome, for example, audio is processed by Google to turn it into text. This website never receives your audio, only the resulting text. The microphone is only active after you click it.
4. Booking a meeting or leaving a message
If you book a meeting or ask Sofia to pass on a message, I store the details you give (name, email, phone if provided, company, your note, the chosen time) in my private database so I can reply and prepare. Legal basis: Art. 6 (1) (b) GDPR (steps you request before a possible contract) and Art. 6 (1) (f) GDPR.
- Email: confirmations and replies are sent through Resend (USA). Emails you send to my site address are also received through Resend.
- Calendar: confirmed meetings are added to my Google Calendar (Google Ireland Ltd. / Google LLC), including your name, email and note.
- Notifications: I may receive a short summary of your request on my own WhatsApp or by email.
I delete booking and message data [e.g. 12 months after our last contact] unless we're still in touch or I'm legally required to keep it.
5. Contacting me on WhatsApp
If you message my WhatsApp business number, your messages and profile name are processed by WhatsApp Ireland Ltd. / Meta Platforms (USA) and stored in my private inbox so I can reply. If I've turned on automatic replies, Sofia may answer your questions about my work; to do that, the conversation is sent to Anthropic as described in section 3. Legal basis: Art. 6 (1) (b) and (f) GDPR. Meta's own privacy policy applies to your use of WhatsApp.
6. Fonts
This site loads its fonts (Inter, Instrument Serif) from Google Fonts, which transmits your IP address to Google. [Recommended: host the fonts on your own server instead and replace this section with "Fonts are hosted locally; no data is sent to Google." German courts have fined sites for loading Google Fonts without consent.]
7. Browser storage and cookies
The site doesn't use tracking or advertising cookies. It saves a few small settings in your browser's local storage: whether you've seen the intro, and whether the "Have a question?" hint was shown. These stay on your device and are only used to make the site work as you'd expect (§ 25 (2) TDDDG). A login cookie is used only for my private dashboard.
8. Transfers outside the EU
Some providers above are based in the USA. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the EU Standard Contractual Clauses. [Check each provider (Anthropic, Resend, ElevenLabs, Google, Meta, your host) and list its transfer basis here.]
9. Overview of providers
| Provider | Purpose | Data |
|---|---|---|
| [Host] | Hosting the site and database | All data on this site, server logs |
| Anthropic (Claude) | AI replies | Chat messages; WhatsApp conversations if auto-reply is on |
| ElevenLabs | Sofia's voice | Text of Sofia's replies |
| Resend | Sending and receiving email | Name, email, message content |
| Google Calendar | My calendar | Confirmed meetings with your name, email and note |
| WhatsApp / Meta | WhatsApp messages | Phone number, profile name, messages |
| Google Fonts | Fonts | IP address [remove if self-hosted] |
10. Your rights
You have the right to access your data (Art. 15 GDPR), correct it (Art. 16), have it deleted (Art. 17), restrict processing (Art. 18), receive it in a portable format (Art. 20), and object to processing based on legitimate interest (Art. 21). Just email me at sanjailenin29@gmail.com.
You can also complain to a data protection authority. Mine is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information).
11. No automated decisions
Sofia answers questions and drafts messages, but she doesn't make decisions about you. Every message sent on my behalf and every meeting confirmation is approved by me personally.
12. Changes
I'll update this page when the site changes. The date at the top shows the latest version.