Your data. Your rights.

Scope of this notice

This notice describes HellYesAI, its contact routes and the optional services available in this version. Sending an enquiry and consenting to analytics or advertising are separate decisions.

Your details

Four questions cover your goal, task, current routine and responsible user. You then choose email OR an international telephone number for a reply. First name and surname are optional; both contact routes are never required together. Until you explicitly submit, answers stay in the open page's memory. Form values are not stored in cookies, localStorage or analytics events. Autofill and session restoration depend on your browser. Please do not include sensitive information or confidential details about others.

Enquiry and confirmation

“Send enquiry” transfers your reviewed details, language and source page through this website to our enquiry service. The enquiry and pending sending jobs are stored together. “Saved” or “queued for sending” does not confirm email delivery. For email contact, we send a confirmation link. Your address is confirmed only when you explicitly select Confirm on that page; opening the link alone is insufficient. The link is valid for 24 hours from creation. We then review the confirmed enquiry and may reply about it. A callback request is handled without email confirmation and is not a confirmed email enquiry. Neither route subscribes you to a newsletter or creates a contract. Copying or downloading only creates your own copy.

Purposes and legal grounds

We use contact and project information to answer and consider the collaboration you request. Article 6(1)(b) GDPR applies to requested steps before a contract with you. For company representatives and general questions, Article 6(1)(f) supports our legitimate interest in handling specific enquiries. Secure delivery, abuse prevention and remembering your privacy choice also serve legitimate interests under (f). Optional analytics and advertising rely on your consent under (a). Details are not legally required; without a suitable contact route we cannot reply. Measurement consent is not required to submit an enquiry.

HellYesAI · Newsletter

By selecting this button, I request the HellYesAI newsletter: practical ideas about AI and automation, plus news about relevant new offers and launches. Subscribing is optional and separate from an enquiry. I am subscribed only after separately confirming my email. I can unsubscribe at any time using the link in each newsletter email. Optional consent under Article 6(1)(a) GDPR applies only to HellYesAI. For this separate subscription we process the email address, language, source page, consent version and request, confirmation and unsubscribe status. The confirmation link lasts 24 hours; opening it alone does not subscribe you. Withdrawal applies going forward and does not change a specific enquiry. A new subscription after unsubscribing needs a new separate confirmation. The same brand-scoped storage at Supabase and sending through Resend are used for this purpose. The 24 hours describe link expiry, not a deletion period. Subscription, consent and withdrawal evidence are stored; no automatic deletion period is promised here. Newsletter status is not treated as a confirmed enquiry or sales qualification. With your corresponding analytics or marketing consent, Google Analytics or Meta also measure newsletter requests, explicit confirmations and unsubscribes as separate newsletter events with language, status and a random event identifier. The email address and confirmation link are not sent. Newsletter events do not count as enquiry or Google Ads conversions.

Delivery and abuse prevention

Vercel delivers pages, fonts, images and other static files through its global network, processing your IP address, time, requested resource and technical browser information. Enquiries pass through protected server-side functions; database and sending credentials are not in the browser. When intake is enabled, Vercel Firewall limits submission and confirmation attempts with separate keys derived from brand, action and the IP address supplied by the hosting service. The key is hashed; Vercel also receives the technical IP address. Regional counters use 60-second windows. Durable records in the intake additionally enforce contact and total quotas over one hour. Hashes are pseudonymous, not anonymous; these windows are not enquiry deletion periods. The website application does not write form contents into its own access logs. Vercel may process technical operational and security data.

Enquiry storage, recipients and email

Our central enquiry service stores submitted contact and project details, language, source page, receipt and confirmation status and technical identifiers in PostgreSQL at Supabase in Frankfurt. People responsible for handling the enquiry within the operator and authorised technical service providers may access data for their work. Resend sends transactional confirmations and enquiry messages from its Ireland sending region. It processes recipient address, message content and sending status; internal notifications may also include enquiry details. Direct email additionally involves your mail provider and our receiving mailbox. This does not subscribe you to a newsletter.

How long information remains

The confirmation link stops being usable for a new confirmation after 24 hours. This does not automatically delete the enquiry, verification record or sending job. We retain contact and enquiry information as needed for handling, follow-up and any resulting collaboration; further retention depends on applicable legal recordkeeping duties or legitimate legal claims. There is no single fixed period for every case. Ask us for the status and criteria applying to yours. Technical retry and sending identifiers prevent duplicate processing; the end of a retry window is not a deletion promise either. Provider logs and backups have their own retention rules. For erasure or information about your enquiry, logs and backups, contact info@hellyesai.com.

Privacy choice and withdrawal

The necessary hy:privacy:v1 record stores version, service configuration, time and your analytics/advertising choices. It is valid for 180 days from your choice. Expired or mismatched records are rejected and removed where possible at the next check. Reopen the settings in the footer to change or withdraw your choice. This stops further optional activity, clears accessible optional cookies and reloads the page where needed. If browser storage fails, an explicit choice may apply only to the current page. You can clear website data in your browser. Withdrawal does not affect earlier lawful processing.

Optional measurement

Google Analytics, Google Ads, Meta Pixel are available only with the corresponding consent. We measure page views, quiz starts and visitor, pending-enquiry or confirmed status, together with page and registration language. Events do not contain names, email addresses, telephone numbers, free-text answers or confirmation tokens. The hy:measurement:v1 browser record stores status, registration language and used event identifiers to avoid duplicate measurement. It lasts 180 days, renewed whenever the record is saved again. A confirmed email enquiry is reported as a lead only with the relevant measurement consent already present when confirming; callback requests do not create that conversion. Later consent does not replay an earlier conversion. Identifiers are pseudonymous; this is not a promise of anonymous processing.

Google Analytics

After analytics consent, Google Analytics receives usage events and technical connection/device information and may use identifiers and cookies. Event and user retention for this property are each set to 2 months. Resetting user retention on new activity is off; Google Signals and user-provided data collection are off. This period applies to the relevant user/event data, not all aggregated standard reports or the lifetime of every cookie.

Advertising measurement

Google Ads, Meta Pixel may process technical browser information and pseudonymous identifiers after advertising consent to attribute advertising and confirmed enquiries. Validated advertising click identifiers are passed on only with that consent; arbitrary URL parameters, form values and confirmation tokens are excluded. Cookies may support recognition. Where lead measurement is configured, a server-confirmed email enquiry is reported once with an event identifier, not when the form is submitted. This website does not send hashed contact details for enhanced conversions. Advertising-provider retention is separate from local 180-day storage and Analytics settings; details appear in the provider information below.

Providers and international processing

Vercel, Supabase and Resend use international infrastructure and subprocessors. Frankfurt identifies the database location; Ireland identifies the sending region. Resend explicitly states that it stores message content and delivery logs in the United States and uses EU Standard Contractual Clauses, supplemented by the EU-US Data Privacy Framework, for transfers. EU-only processing is therefore not promised. Approved Google/Meta services may also process outside the EEA. Linked provider information describes recipients, safeguards and rights. Contact us for the contracts and transfer grounds applying to your data or a copy of relevant safeguards.

Your rights and contact

Subject to the legal conditions, you can request access, correction, erasure, restriction and portability and object to processing based on legitimate interests. You may withdraw consent for the future at any time. Contact info@hellyesai.com. Proportionate identity verification may be needed. You can complain to a competent supervisory authority, including the Commissioner for Personal Data Protection in Cyprus or the authority where you live or work.

Fixed questions, illustrations and external links

The quiz uses fixed questions and does not make automated eligibility, recruitment or investment decisions. Images marked AI Generated or AI Modified are illustrations, not evidence of actual staff, customers or business results. External websites open when you follow their links; quiz answers are not appended to those links.

Provider information and rights

GDPR / DSGVO / ΓΚΠΔ

Commissioner for Personal Data Protection

Vercel

Supabase

Resend

Google Analytics

Google

Meta