Privacy for the chatbot

1. Data Controller and Contact Information

The data controller is Alessandro Del Rosso, operating as AlexTech.ai, based in Italy. Contactable at the following addresses:

• Email: info@alextech.ai

• Website: www.alextech.ai

2. Types of Data Collected

Using AlexTech.ai Chatbot (the chat and the "Ask the news" bar on the homepage) requires no registration. The following data is processed:

• Conversation ID: a random identifier tied to the browser session, used to keep the conversation context. It contains no identifying data.
• IP address: used to limit the number of requests (rate limiting) and prevent abuse, and recorded together with the messages in the conversation archive (see section 5).
• Message content: questions sent and answers generated, with the cited sources. The text is sent to the language model provider to generate the answer (section 6) and is archived on AlexTech.ai servers.
• Technical cookies: to keep the conversation going, your browser receives a session cookie holding the conversation ID, plus the history of the latest exchanges. These are strictly necessary technical cookies: the chatbot sets no profiling, advertising or analytics cookies. For the site's full cookie overview see the Cookie Policy.

Please do not include personal data (name, email, health data, etc.) in your messages: if included, it is processed and retained like the rest of the text.

3. Purposes of Processing

The collected data is used exclusively for the following purposes:

• Enabling the conversation to function via the conversation ID.
• Ensuring service security (rate limiting, abuse prevention).
• Checking and improving answer quality, including by reviewing archived conversations.

4. Legal Basis

All the purposes listed in section 3 rest on the legitimate interest of the controller pursuant to Art. 6(1)(f) GDPR:

• Operation and security of the service (conversation ID, rate limiting, abuse prevention): the interest is making a working assistant available that is not open to abuse. Processing is limited to what is technically necessary and requires no consent.
• Checking and improving answer quality, by reviewing conversations archived within the 90 days of section 5: the interest is fixing recurring errors and improving the assistant. The scope is limited to what was already typed into or asked of the chatbot, with no data collected from other sources.

Legitimate interest was assessed as prevailing over the right to privacy: you suffer no disadvantage from the short-term retention of your own exchanges, you can reset the conversation at any time with the /reset command (section 5), and you may object at any time (section 7).

5. Retention Period

Conversations (date and time, language, IP address, questions, answers and cited sources) are archived on AlexTech.ai servers for up to 90 days, after which they are deleted automatically. The archive is not publicly accessible.

Rate-limiting counters are temporary (technical files tied to the current hour, keyed by a hash of the IP). Answers to frequent questions may be cached for 24 hours to respond faster: the cache holds only the answer, not the IP or the identity of whoever asked.

You can end the conversation at any time by typing the /reset command in the chat: the exchange history is cleared and a new conversation starts, which does not inherit the previous messages. The 90-day archive described above covers sessions that actually took place and is not wiped retroactively by the command: for definitive deletion of your data, exercise the rights in section 7.

6. Data Sub-processors

For response generation, AlexTech.ai Chatbot relies on third-party providers of AI language models. The main sub-processors are:

• OpenRouter (OpenRouter, Inc., United States): routing service that receives the messages and forwards them to the language model. Privacy policy: openrouter.ai/privacy.
• OpenAI: provider of the language model that generates the answers. Privacy policy: openai.com/policies.

Processing by these providers may involve a transfer of data to the United States, under the safeguards described in their respective policies. For API requests the providers state that they do not use the data to train their models.

Voice questions (optional, microphone button in the "Ask the news" bar): speech is transcribed by your browser through the Web Speech API. Depending on the browser, the audio may be processed by the browser vendor (e.g. Google for Chrome, Apple for Safari) under its own privacy policy. AlexTech.ai never receives or stores the audio: only the transcribed text reaches the chatbot. Answers are read aloud locally on your device.

7. User Rights

Under the GDPR, the user has the right to:

• Access personal data (Art. 15)
• Rectification (Art. 16) and erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Lodge a complaint with the supervisory authority (Garante per la Protezione dei Dati Personali in Italy)

To exercise your rights, contact us at: info@alextech.ai. You can also send the request from the chat by typing /reset and stating the email address to be contacted. We reply within one month of receipt, free of charge.

8. Nature of the Service

Use of the chatbot is entirely optional. Choosing not to use it has no impact on access to other content on the site.

Scope of the service: the chatbot answers only about articles and news published on AlexTech.ai. Questions outside that scope (current time and date, weather and forecasts, real-time data, general knowledge, recipes, professional advice, code writing) get no answer: the system recognises them and refuses, pointing you to what it can help with. No personal data is processed in any way to answer questions of that kind, because they get no answer.

9. Changes to This Notice

This notice may be updated periodically to reflect regulatory changes or modifications to the service. Users are encouraged to check this page regularly.

For the general site privacy notice, please see the Privacy Policy.