Privacy policy

Data controller and contact details

The organisation VšĮ Tavo robotas is responsible for personal data processed through this website. Contact us by email or telephone about privacy or to exercise your rights.

The chatbot: what you should know

When you use the assistant, your question and recent conversation are sent to an AI system to generate an answer. You are interacting with an automated AI assistant, not a person. It provides information about our projects, events, services and collaboration opportunities, but its answers may be inaccurate.

Answers are not official commitments or individual professional advice. The assistant does not make decisions with legal or similarly significant effects on you. Please check important information with our team. Automatic handover to a human consultant is not currently available.

Data we process

To generate an answer we process your question, at most six preceding messages, the selected website language and the generated answer. The request also includes a consent confirmation and policy version. We do not create a visitor account or a permanent consent register.

Do not enter passwords, national identification numbers, payment or health data, trade secrets or other people's personal data. The assistant does not need these. Documents and other files cannot be uploaded in this chat.

Security processing includes the IP address, request time and verification result. The rate-limit file contains a pseudonymous identifier derived from the IP address and timestamps, not message content. These data are not fully anonymous. Cloudflare Turnstile also evaluates technical browser signals.

Purposes and legal bases

We process conversation data to generate AI answers based on your freely given consent (GDPR Article 6(1)(a)). The box is not preselected: you actively choose before sending a question. This consent does not cover advertising or newsletter subscriptions.

Request verification and rate limiting serve our legitimate interest in protecting the website against abuse, automated requests and disproportionate costs (GDPR Article 6(1)(f)). You may object to this processing.

Service providers and transfers

An Interneto vizija server handles website requests. The question and conversation context are sent to the OpenAI API to generate an answer. No separate visitor IP address field is included in that AI request; any data you type in the text are transmitted with it. For details about data processing, see OpenAI API – Data controls.

Cloudflare receives a verification token, IP address and technical signals for bot protection. Our server does not include chat text in the Turnstile verification request. Cloudflare describes itself as a processor when protecting the website and as a separate controller when improving its bot detection technology. For details, see Cloudflare – Turnstile Privacy Addendum.

International providers may process data outside the European Economic Area, including in the United States. Consent to the assistant does not itself replace the safeguards required for international transfers. Ask admin@tavorobotas.lt for information on applicable transfer grounds and copies of safeguards.

Retention

The conversation and consent choice exist only in the open page's memory, not cookies or persistent browser storage. Reloading or closing the page discards them. Minimising the chat alone does not delete it. You can clear history in settings; a downloaded copy remains on your device until you delete it.

Our assistant application keeps no separate server-side conversation archive. AI requests use “store: false”. This does not mean the provider retains no data.

Under OpenAI's default API terms, content is not used for training unless data sharing is enabled. Safety logs may remain for up to 30 days, longer for legal or safety exceptions; technical prompt caches for up to 24 hours. See the provider documentation for details.

Rate limits use the preceding 15 minutes of requests. This is not a file-deletion deadline: old timestamps are removed when the same visitor's rate-limit file is updated; the file itself may remain in server temporary storage. Server access, error and provider security logs follow infrastructure retention rules separate from chat history.

Withdrawing consent

Withdraw at any time by selecting “Withdraw consent and clear the chat” in the chat settings. This stops new chat requests and clears history in this page. You may also contact admin@tavorobotas.lt.

Withdrawal does not affect the lawfulness of earlier processing. Closing the window or cancelling the wait for a response cannot recall an already transmitted request from a provider. We handle deletion requests separately, taking account of available data, provider capabilities and legal obligations.

Your rights and complaints

Subject to the GDPR, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. Contact admin@tavorobotas.lt. We may ask for proportionate identity verification to protect personal data.

We respond without undue delay, normally within one month. Where the GDPR permits, complex or numerous requests may require a further two months; we explain the extension within the first month. Because we keep no conversation archive, we may not hold a copy of a past chat.

You may complain to Lithuania's State Data Protection Inspectorate or another competent supervisory authority.

Newsletter subscriptions

We use an email address separately submitted for subscription to send project and organisation updates based on consent (GDPR Article 6(1)(a)). Chat consent is not newsletter consent. Unsubscribe by contacting admin@tavorobotas.lt.

The subscription form forwards your email address, registration time and source to our mailbox via Mailjet. This website application does not create a separate subscriber database. Data are used for active subscriptions until you unsubscribe; related email and technical log retention depends on email service rules and a justified need to handle requests or defend rights.

Website security, statistics and local storage

Cloudflare Turnstile protects assistant and subscription requests. Cloudflare Web Analytics provides aggregate traffic and page-performance statistics without analytics cookies. These website functions are separate from consent to send a conversation to an AI system.

Your cookie choice is saved as “cookie-consent” in local browser storage until you change it or clear site data. This storage does not remember chat history or assistant consent. Change your preferences using “Cookie settings” in the footer.

Policy updates

This version describes the website's current operation. We will update the policy and its date when processing changes. If the assistant's consent terms change, new requests will require acceptance of the updated version.