Privacy Policy

This site collects very little personal information. There are no accounts, no newsletters, no advertising trackers, and no cookies. If you send a message through a form, the details you enter are emailed to me so I can reply. If you use the AI chat, what you type is sent to OpenAI to generate an answer. That is the extent of it.

As an individual engaged in commercial activity in British Columbia, I handle personal information in line with BC's Personal Information Protection Act (PIPA) and, where personal information crosses provincial or national borders, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). I am the person responsible for this site's privacy practices and can be reached at the contact below.

• Contact and inquiry forms — your name, email address, optional organization, and message are sent to me by email so I can respond. They are not stored in a database on this site.
• Business challenge tool — the details you enter about a workflow problem, plus your name and email if you choose to share them, are emailed to me the same way.
• “Ask Dan” AI chat — the messages you type are sent to OpenAI to generate a reply. The site does not save your conversation. If you choose to send the transcript by email using the consent checkbox, it is emailed like any other form message.
• Site analytics — a self-hosted Umami instance (stats.danspelt.com) records aggregate, cookieless page-view statistics and a small allowlist of non-personal events (for example, which call-to-action was clicked). It does not use cookies and does not collect names, emails, message content, or other personal details.
• Technical logs — the hosting provider keeps standard server logs (such as IP address, browser type, and timestamps) for security and operations. A short-lived, in-memory rate limiter uses an IP-derived key to deter form abuse and is discarded when its window expires.

By submitting a form or using the AI chat, you consent to the information you enter being used for the purposes described above. Please don't include sensitive personal information (health, financial, or identity details) in messages — it isn't needed and isn't wanted.

Two third-party processors handle limited information on my behalf: Resend delivers form submissions to my inbox, and OpenAI generates AI chat replies from the text you provide. Both may process data in the United States, where it is subject to that jurisdiction's laws. The site itself is hosted on a virtual private server managed through Coolify. Links to external sites (such as GitHub, LinkedIn, or live project demos) take you to services with their own privacy practices.

Message emails are kept only as long as needed to handle our correspondence and any resulting work. Analytics data is aggregate and not tied to you. Server logs follow the hosting provider's default retention. You can ask me to delete correspondence at any time.

The site is served over HTTPS, form inputs are validated and rate-limited, and collection is limited to what each feature actually needs. No method of transmission or storage is perfectly secure, but the amount of personal information at risk here is deliberately kept small.

You may request access to, correction of, or deletion of your personal information, or withdraw consent for future contact, by emailing me. If you believe your concern hasn't been resolved, you may contact the Office of the Information and Privacy Commissioner for British Columbia, or the Office of the Privacy Commissioner of Canada for matters under PIPEDA.

This site is a professional portfolio and is not directed at children. I do not knowingly collect personal information from children.

If this policy changes, the updated version will be posted here with a new date. Privacy questions and requests: danspelt24@gmail.com or the contact form.