Privacy for the chatbot
1. Data Controller and Contact Information
The data controller is Alessandro Del Rosso, operating as AlexTech.ai, based in Italy. Contactable at the following addresses:
• Email: info@alextech.ai
• Website: www.alextech.ai
2. Types of Data Collected
The use of AlexTech.ai Chatbot does not require registration or the provision of identifiable personal data. The chatbot only collects:
- Anonymous session ID: generated to enable the conversation to function. It is not traceable to the user and is not associated with identifying data.
- IP address: collected exclusively for technical purposes (rate limiting, security) and not persistently stored beyond the session duration.
- Message content (prompts): the text of questions submitted to the chatbot is transmitted to third-party providers (OpenAI) for response generation. It is not persistently stored on AlexTech.ai servers.
If the user voluntarily provides personal data (e.g., name, email) within the message text, such data will be ignored by the system and not retained.
3. Purposes of Processing
The collected data is used exclusively for the following purposes:
- Enabling the conversation to function via session ID.
- Ensuring service security (rate limiting, abuse prevention).
- Improving service quality through aggregated and anonymous statistical analysis.
4. Legal Basis
The processing of data for the operation of the chatbot is based on the legitimate interest of the controller pursuant to Art. 6(1)(f) GDPR: providing a functional and secure virtual assistant service. Consent is not required for the processing of data strictly necessary for technical operation.
5. Retention Period
Conversation sessions with the chatbot are neither recorded nor retained by AlexTech.ai. The session ID is temporary and is deleted at the end of the conversation or after a period of inactivity.
Technical logs containing IP addresses may be retained for a maximum of 30 days for security purposes, after which they are anonymized or deleted.
6. Data Sub-processors
For response generation, AlexTech.ai Chatbot relies on third-party providers of AI language models. The main sub-processors are:
- OpenAI (OpenAI Ireland Ltd, Ireland) — for processing prompts and generating responses. Data sent to OpenAI is subject to their Privacy Policy.
OpenAI does not use data submitted via the API for model training, unless explicitly stated otherwise.
7. User Rights
Under the GDPR, the user has the right to:
- Access personal data (Art. 15)
- Rectification (Art. 16) and erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
- Lodge a complaint with the supervisory authority (Garante per la Protezione dei Dati Personali in Italy)
To exercise your rights, contact us at: info@alextech.ai.
8. Nature of the Service
Use of the chatbot is entirely optional. Choosing not to use it has no impact on access to other content on the site.
9. Changes to This Notice
This notice may be updated periodically to reflect regulatory changes or modifications to the service. Users are encouraged to check this page regularly.
For the general site privacy notice, please see the Privacy Policy.