Privacy policy
AI Web Center collects personal data only when you sign up for the email list or send a project inquiry: your email address, what you tell us, and a record of your consent. Questions asked in the site chat are answered by an AI provider and aren’t stored by AI Web Center. It uses no cookies, tracking scripts or third-party analytics (visits are counted from its own server log), stores everything on its own server, and never sells or shares your data.
Who is responsible
AI Web Center is run by Jan Dekkers, Huntington Beach, California, United States, who decides how your data is used (the “controller” under the EU and UK GDPR). For anything about your data, email hello@aiwebcenter.com. You’ll get an answer within 30 days, usually much sooner.
What we collect and why
Email signup
When you request the AI Coding Starter Kit, we store:
- your email address
- the consent text you agreed to and the page you signed up on
- timestamps for when you signed up, confirmed, received the kit and unsubscribed
- random confirmation and unsubscribe codes used in the links we email you
We use this only to send the kit and occasional updates about AI Web Center. The legal basis is your consent (GDPR Article 6(1)(a)), which you give by ticking the box and confirming by email. Nothing beyond the confirmation email is sent until you confirm.
Project inquiries
When you use the contact form on the services page, we store your name, email address, optional company and budget range, the service you’re interested in, your message, the page you sent it from, and the time. We use this only to answer you and, if we work together, to prepare a proposal. The legal basis is taking steps at your request before a possible contract (GDPR Article 6(1)(b)). The message is also emailed to Jan from our own mail server.
Site chat
The “Ask AI Jan” chat is an AI assistant that answers questions about AI Web Center and Jan’s services from the content of this site. When you ask a question, the conversation so far is sent from our server to our AI model provider, DeepSeek, which generates the answer under its own privacy policy and may process it outside the United States, including in China. AI Web Center doesn’t store chat conversations or link them to you; your browser keeps the open conversation only until you close the tab. Please don’t enter health, financial or other sensitive information in the chat; use the contact form for project details. The legal basis is our legitimate interest in answering visitors’ questions (GDPR Article 6(1)(f)).
Website security check
When you use the website security check, the address you enter is sent to our server, which then visits that website and reads its public DNS records to grade it. The address and the results aren’t stored or logged; the result is kept in the server’s memory for five minutes, so a repeat check of the same site shows the same report, and then it’s gone. To stop the tool being misused, our server counts how many checks come from each IP address in the last day, in memory only. The legal basis is our legitimate interest in providing the tool you asked to use (GDPR Article 6(1)(f)).
If you ask for the report by email, we use your email address only to send that one email from our own mail server, and don’t keep it. To stop the feature being used to flood someone’s inbox, the server counts report emails per IP address and per recipient for a day, in memory only, recording the recipient as a one-way hash rather than the address itself. The mail server’s own log records the delivery like any other email (see Server logs). If you also tick the box to join the email list, you’re signed up exactly as with the starter-kit form above: we send a confirmation link first, and nothing else until you click it.
Website examples
The website examples are demos, mostly for fictional businesses; WoodArt Delft is a concept site for a real artist, and what you enter there doesn’t reach him either. What you enter in them (bookings, orders, estimates) is stored on our server under a random code your browser generates, so only you see it, and is deleted automatically after 48 hours. Please use made-up details there.
Server logs
Like any website, our web server records technical request data: IP address, date and time, the page requested, browser type and the response code. Our mail server similarly logs which addresses messages were sent to and from. We use these logs to keep the site and email running and secure, for example to block abusive traffic.
We also use the web server log to understand which pages people read: once an hour it’s turned into daily counts of visits per page and of the websites that linked here, which contain no personal data. A list of individual page visits (time, IP address, page, the linking website and a short browser description such as “Safari on iPhone”) is kept for 14 days, like the log itself, and only Jan can see it. Nothing runs in your browser for this, and none of it is shared with anyone.
The legal basis for both is our legitimate interest in operating a secure service and understanding how it’s used (GDPR Article 6(1)(f)).
What we don’t do
No cookies, no third-party analytics, no advertising or tracking scripts, no social media embeds. We don’t sell, rent or share your data, and we don’t use it for profiling or automated decisions.
Where your data is stored
Everything is stored on our own server: a virtual private server rented from Bluehost, located in a data center in Ashburn, Virginia, United States. Our emails are sent by our own mail server on that machine; no third-party email marketing service is involved. Bluehost provides the hardware and network but doesn’t use the data on our server for its own purposes.
If you’re outside the United States, signing up means your email address is transferred to and stored in the United States. We rely on your consent for that transfer.
How long we keep it
- Unconfirmed signups are deleted automatically 30 days after signup.
- Confirmed subscribers are kept until you unsubscribe.
- After you unsubscribe, your record is deleted automatically within 30 days.
- Project inquiries are deleted automatically 24 months after they’re sent, or sooner if you ask.
- Website example data is deleted automatically after 48 hours.
- Chat conversations aren’t stored by us.
- Web server logs, and the page-visit list made from them, are deleted after 14 days. Daily visit totals contain no personal data and are kept.
- Mail server logs are deleted after about five weeks.
Your rights
You can unsubscribe at any time with the one-click link in every email.
You can also ask us to show you, correct or delete your data, to stop or limit using it, or to send it to you in a portable format, and you can withdraw consent at any time without affecting what happened before. Email hello@aiwebcenter.com and we’ll act on it free of charge. We may ask you to confirm the request from the address in question, so that nobody else can make it for you.
If you live in the European Union or EEA, you can complain to the data protection authority in your country; the European Data Protection Board lists them at edpb.europa.eu. In the United Kingdom, that’s the Information Commissioner’s Office. If you live in California, you have the same rights to know about, correct and delete your data, and we never sell or share personal information.
Children
This site is meant for adults working with software. We don’t knowingly collect data from anyone under 16. If you believe a child has signed up, email us and we’ll delete the record.
Changes to this policy
If we change this policy, we’ll update the date at the top. If a change affects how we use your email address, we’ll tell subscribers by email first.