Your information, kept purposeful.

Who is responsible

Before launch — legal details pending: TODO: identify the person or legal business operating Psybele and provide any business address or registration details required for that operator.

Psybele is a trading brand and is not a separately incorporated company. Privacy questions and rights requests can be sent to psybele.team@gmail.com.

What we collect

If you request a workflow audit or website project, we collect your name, work email, company, optional role, the service or process category, optional volume or timeline, current website and tools, and the description you provide. The form asks you not to submit personal data about customers, candidates or employees.

Our hosting providers may process basic technical logs needed for security and reliable delivery, such as timestamps, request metadata and error records.

Why we use it

• to review and respond to the enquiry you asked us to handle;
• to prevent abuse and maintain the security of the website;
• to keep a record of the conversation and improve our service.

Providing enquiry details is voluntary, but we need the required fields to assess and respond to your request. We do not make decisions with legal or similarly significant effects about you using the website’s illustrative AI workflows.

The enquiry form relies on your consent. Essential security and operational records rely on our legitimate interests in running a safe service. We do not add enquiries to an automatic marketing list.

Storage, sharing and retention

Enquiries are stored in access-controlled infrastructure used to run this website and are visible only to the authorised Psybele owner. We use OpenAI Sites and its Cloudflare infrastructure, including D1 database storage, to operate this website. Owner sign-in uses ChatGPT authentication. We do not use Supabase. We do not sell your information.

When enabled, Resend sends an owner notification to a Google Gmail inbox. These notifications contain the enquiry type and a request reference, not the contents of your brief or your contact details. If we reply by email, Google processes the contact details and correspondence needed for that conversation.

These providers may process information outside the European Economic Area. GDPR requires a valid transfer mechanism, such as an applicable adequacy decision or Standard Contractual Clauses, where relevant. Operator TODO: confirm the applicable provider contracts, data-processing terms, processing locations and transfer safeguards before completing the legal notice. Contact us for information about the safeguards that apply.

We aim to delete enquiries that do not become active client conversations within 12 months. Records may be retained longer when required for an ongoing engagement, legal obligation or dispute.

Your choices and rights

Depending on where you live, you may ask to access, correct, delete, restrict or receive a copy of your information, object to some uses, or withdraw consent. Email us from the address used in your request. We normally respond within one month, subject to lawful extensions, and may need proportionate information to verify your identity. Withdrawing consent does not affect processing already lawfully carried out. You may complain to Latvia’s Data State Inspectorate (Datu valsts inspekcija) or another competent EU supervisory authority.

Cookie policy and updates

This version of the website does not use advertising or analytics cookies. We do not set non-essential tracking cookies, so there is no optional-cookie consent banner. Essential session technology may be used for the private administrator area. Workflow examples and calculator inputs run in the browser and are not submitted as enquiries. If our practices change, this notice and its update date will be revised.