Privacy policy

Cristian Nichifor is the data controller for this website, cristian-nichifor.com. I am self-employed and work under the CN Webify brand: CN Webify, CVR 46014278, 2300 Copenhagen, Denmark.

For anything about your data, write to cristian@cristian-nichifor.com.

There is no analytics, advertising or tracking on this site, and it sets no cookies of its own.

• Visiting the site: Cloudflare, which serves the site, processes technical data such as your IP address, browser and the pages you request, to deliver the site and protect it from abuse.
• The contact form: what you write is sent to my inbox through Cloudflare Email Routing and kept in my email (Google Workspace with Superhuman Mail). I use it to reply and, if we work together, to run the engagement. Your IP address is used only to limit how many messages one visitor can send per minute. If you dictate, the recording is sent to Cloudflare Workers AI only to turn it into text, and it is not stored.
• The assistant: if you chat with the assistant, your messages are processed to answer you. In a voice chat, so is the transcript of what you say. The next section explains how.
• Booking a call: the booking link opens Superhuman’s calendar. What you enter there is handled by Superhuman under its own privacy policy, and I receive the booking details.
• The Superhuman Docs demo: the demo on the automation pages loads from docs.superhuman.com only after you press its button. From then on, Superhuman’s privacy policy applies to what happens inside it.
• Email: if you write to me, I use your message and address to reply and, if we work together, to run the engagement.

The assistant runs on Cloudflare Workers AI. Your messages are sent to Cloudflare to check them for spam and to write a reply. In a voice chat, your microphone audio is streamed to Cloudflare to be transcribed and is not stored. The reply is spoken with a synthetic voice.

The conversation, meaning your messages and the replies, is kept for 24 hours so it survives a page refresh, and is then deleted.

To limit abuse, the assistant works with a code derived from your IP address that changes every day, never with the address itself. It can pause voice chat for that code for 24 hours. Daily usage counters with no personal data are kept for up to seven days.

Cloudflare does not use what is sent through Workers AI to train AI models. Please do not share sensitive personal data in the chat.

• Delivering and securing the site, and preventing abuse of the assistant: legitimate interest in a working, secure website (GDPR Article 6(1)(f)).
• Answering your questions in the assistant, by email or on a booked call: steps you ask for before a possible contract (Article 6(1)(b)), or legitimate interest in replying to you (Article 6(1)(f)).
• Running an engagement: the contract (Article 6(1)(b)), and legal obligations such as bookkeeping (Article 6(1)(c)).

Cloudflare, Google and Superhuman are based in the United States. Transfers of personal data rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses, as set out in each provider’s data processing terms.

• Cloudflare, Inc.: hosting, security, the assistant and delivering contact-form messages.
• Superhuman: the booking calendar and the Superhuman Docs demo, only when you use them.
• Google (Google Workspace) and Superhuman (Superhuman Mail): email, if you write to me.

• Assistant conversations: 24 hours.
• Voice audio: not stored.
• Abuse codes and voice pauses: up to 24 hours.
• Settings stored in your browser: see the cookies page.
• Emails and engagement records: as long as the conversation or the engagement needs, and as long as Danish bookkeeping law requires, which is five years from the end of the financial year.
• Cloudflare’s own request logs: as set out in Cloudflare’s policies.

You can ask for access to your data, and for it to be corrected, deleted, restricted or moved to another service. You can also object to processing based on legitimate interest. Write to the address in section 01 and I will reply within a month.

The assistant’s spam check is automated. Its only effect is to end a chat or pause voice chat for up to 24 hours. It has no legal or similarly significant effect, and the contact form and email always remain open to you.

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.

When this policy changes, the date at the top changes with it.