AI Software Development
Draft — pending legal review

This notice describes what this website actually does today. It has not yet been reviewed by a lawyer and may change before the site launches on its own domain.

Legal

Privacy notice

Last updated 13 October 2026 · AI Software Development Limited Liability Company

1. Who we are

This website is run by AI Software Development Limited Liability Company (“AI Software Development”, “we”, “us”). We build AI systems, custom software and business automation.

We do not have a public mailbox yet. To ask about your data, use the inquiry form and say what you need; a person reads every inquiry and replies by email.

2. The inquiry form

When you send the form on our home page, we store:

  • your name, email address and, if you give them, your company and budget or timeline;
  • the project type you chose and your project brief;
  • the time it arrived, and its status in our list (for example new or replied);
  • a one-way hash (SHA-256) of your IP address — not the address itself — so we can notice repeated automated submissions;
  • the first 300 characters of your browser’s user-agent string (the browser and operating system it reports).

We use this only to read your inquiry and reply to you. It is visible to our team only. We do not sell it, share it for marketing, or add you to a mailing list, and the form does not email you anything automatically.

3. Portal sign-in

The portal is for people we have invited. When you sign in:

  • you enter your email address. If it belongs to an active portal account, we email a six-digit code to the address on that account, sent from our Microsoft 365 mailbox. We store only a hash of the code; it stops working after 10 minutes, after one use, or after 5 wrong tries;
  • once you are signed in, your browser keeps a session token in sessionStorage for that tab only. It is not a cookie, and it is cleared when you close the tab or sign out;
  • our server stores only a hash of that token, when it expires (at most 12 hours), and your browser’s user-agent string;
  • your portal account holds your name, email address and role;
  • portal actions (for example signing in or out, and changes made in the portal) can be written to an activity log with the time, the account and the action. Email addresses are removed before anything is written to it.

To slow down guessing, the sign-in service counts recent attempts using a hash of your IP address, held in memory and not written to our database.

4. EVA, voice and the microphone

EVA is our on-site assistant. When you send her a message, your message, the personality you chose and the last few turns of this conversation are sent to our server, which asks an AI model provider for an answer — by default Anthropic, with OpenAI as the fallback. On the public site she answers only from this company’s public information. Signed-in portal users can also ask her about portal records their role may see; the server reads those records, read-only, to answer.

We do not store your question text, your IP address or any audio. For each question we record only a run log: when it happened, whether it was answered, which provider and model answered, how long it took and how many characters it was, plus your account if you asked inside the portal. The conversation on the page lives only in the page’s memory and is cleared when you close EVA or leave the page.

Starting an inquiry from EVA. When you describe a project, EVA may offer to start your inquiry. Only if you press Start my inquiry, the last few turns of this conversation are sent to our server, which asks the same AI model provider to draft a project type and a short project brief from your own words, with email addresses, phone numbers and links removed. The draft is placed in the inquiry form on this page, in your browser only; it is not stored and nothing is sent to us until you review it, add your name and email yourself and press Send inquiry. For each draft we record only the same kind of run log as for a question, with no conversation text.

Voice is off until you turn it on. When it is on, each line EVA says (her fixed greetings, or an answer our server produced) and the personality you chose are sent to our server, which asks OpenAI to turn that line into speech and returns the audio to your browser. Our server limits these requests using a hash of your IP address, held in memory.

Talk (microphone) uses your browser’s built-in speech recognition, and your browser asks for microphone permission only when you press Talk. In Google Chrome, your browser sends the audio to Google to be transcribed, under Google’s own terms; we never receive the audio. The resulting words are placed in EVA’s message box, and are then handled like typed text.

5. Cookies, analytics and tracking

This website sets no cookies and runs no analytics, advertising or tracking scripts. The only thing it stores in your browser is the portal session token described above, in sessionStorage, and only after you sign in.

6. Services that process data for us

  • Vercel hosts this website and our server. Like any web host, it receives your IP address and request details when you load a page, and keeps standard logs under its own policies.
  • Supabase hosts the database that holds inquiries and portal accounts.
  • Google Fonts serves the typefaces on these pages, so your browser contacts Google’s servers, which receive your IP address and browser details.
  • Anthropic and OpenAI generate EVA’s answers when you send her a message (Anthropic by default, OpenAI as the fallback), and OpenAI turns her lines into speech, only when you have turned voice on.
  • Google transcribes microphone audio in Chrome, only when you press Talk.
  • Microsoft 365 sends portal sign-in codes by email.

7. How long we keep it, and your choices

We have not yet set a fixed deletion schedule. Inquiries and portal accounts are kept while they are useful for the conversation or project they relate to. Sign-in codes expire after 10 minutes and sessions after at most 12 hours.

You can ask us to show you, correct or delete what we hold about you by sending an inquiry that says so. You can use the site without voice or the microphone; both stay off unless you turn them on.

8. Security

The site is served only over HTTPS. Sign-in codes and session tokens are stored only as hashes, IP addresses are never stored in plain form, and our server accepts form and voice requests only from this website. No system is perfectly secure.

9. Children and changes

This site is for businesses and is not directed at children under 13. EVA’s optional “Flirty” personality is available only to visitors who confirm they are 18 or older.

If what this site does changes, we will update this notice and the date at the top.