Privacy Policy

1. Call bookings. When you book a call, we collect your name, email address, the time slot you choose and anything you write in the form. We use this only to schedule and hold the call and to follow up on your request. The appointment is created in our Google Calendar with a Google Meet link. Legal basis: taking steps at your request before entering into a contract.

2. Contact form and email. When you use the contact form on this website or email us, we use your name, email address and message only to answer you. Legal basis: our legitimate interest in responding to enquiries.

3. "Talk to Mark" – live video calls with Mark's AI digital twin. The floating "Talk to Mark" button lets you have a live video conversation with an AI digital twin of Mark Schilperoort (an AI, not the real person). When you start a call, your browser asks permission to use your microphone. During the call, your speech is converted to text and processed by AI models to generate the twin's replies, voice and video. Your camera is never used. After the call, a written transcript of the conversation, the date, time, call length and a short AI-generated summary are emailed to us so Mark can follow up personally. We do not store audio or video recordings of calls. Calls last up to 3 minutes. Legal basis: your consent, which you give by starting the call; you can stop at any time by ending the call or closing the window.

We use trusted service providers that process data on our behalf, only for the purposes above:

• Base44 – website hosting and the booking form
• Google (Calendar, Meet, Gmail) – appointments and email
• LiveKit – real-time call infrastructure (servers in the EU), including speech-to-text and AI language models used during calls
• LemonSlice – generation of the twin's live video
• ElevenLabs – generation of the twin's voice
• Vercel – hosting of the call window
• Resend – delivery of call transcripts to our mailbox
• YouTube – embedded videos on this website (YouTube may set its own cookies when you play a video)

Some of these providers are based in, or may process data in, the United States. Where that happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

• Call transcripts and summaries: 12 months, then deleted.
• Booking details and email correspondence: as long as needed to handle your request and any resulting project, and no longer than 24 months after our last contact, unless the law requires us to keep it longer (for example invoices, which we keep for 7 years under Dutch tax law).

Our service providers may keep short-term technical logs for security and troubleshooting.

You have the right to access, correct or delete your personal data, to object to or restrict its use, to data portability, and to withdraw consent at any time. To use any of these rights, email info@msaidesign.com and we will respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

We take appropriate technical and organisational measures to protect your data, such as encrypted connections and access limited to Mark Schilperoort.

We may update this policy. The latest version is always on this page.