Privacy notice

Last updated: 19 October 2026

1. Who the controller is

The data controller is Andrea Vallieri, Viale Roma 22, 28100 Novara (NO), Italia, VAT 02677580033. For any question about your data, write to work@andreavallieri.com.

2. What data I collect

• Browsing data: IP address, browser and device type, pages visited, date and time. The infrastructure hosting the site records them to run and protect it.
• Booking data: name, email, company and topic of the call (the last two optional) and the time you choose.
• Conversations with Friday: the messages you write to the assistant and the data you choose to share, such as name, email, company and needs.
• Communications: the content of the emails you send me.

Please don't enter special category data (for example about health) or other people's data on the site.

3. Why I use it and on what legal basis

• Running the site, protecting it from abuse and counting visits in anonymous, aggregated form: legitimate interest (Art. 6(1)(f) GDPR).
• Organising the intro call, answering your requests and preparing a possible proposal: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
• Handling the conversation with Friday and sending me a summary so I can get back to you: pre-contractual steps at your request and legitimate interest in replying (Art. 6(1)(b) and (f) GDPR).
• Complying with legal obligations, for example tax rules: legal obligation (Art. 6(1)(c) GDPR).

I don't use your data for advertising and I don't sell it.

4. Friday and artificial intelligence

Friday is an artificial intelligence system, not a person, and says so at the start of every conversation. To generate replies, messages are sent through the OpenRouter service to Anthropic's Claude language model. The service is set up so that conversations are not used to train models and are not kept beyond the time needed to generate the reply.

Friday can make mistakes and does not take decisions with legal or similarly significant effects on you (Art. 22 GDPR). I check anything important during the call. If Friday books a call for you, it uses the same data and rules as booking on the site.

5. Who receives it

Data is processed by providers acting as processors:

• Cloudflare, Inc.: site hosting, network and security, including the Turnstile anti-bot check used for Friday and booking, and anonymous, aggregated visit statistics (Cloudflare Web Analytics, without cookies).
• Google (Google Workspace): email, calendar and Google Meet for the call.
• OpenRouter, Inc.: routing Friday's requests to the AI model.
• Anthropic: the AI model used by Friday.

Some of these providers may process data outside the European Union, in particular in the United States. In those cases the transfer relies on GDPR safeguards such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

6. How long I keep it

• Booking data, Friday summaries and emails: up to 24 months from the last contact, unless we start working together. In that case the periods set by law apply, for example tax rules.
• Browsing data: for the technical period set by the infrastructure provider.
• The Friday conversation also stays in your browser, only while the site's tab is open.

7. Your rights

At any time you can ask to access, correct or delete your data, restrict its processing, receive it in a portable format, or object to processing based on legitimate interest (Arts. 15-21 GDPR). Just write to work@andreavallieri.com. If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian data protection authority (garanteprivacy.it) or with your local authority.

8. Minors

The site is aimed at businesses and professionals. I don't knowingly collect data from children under 14.

9. Cookies

For cookies and similar technologies, see the cookie policy.

10. Changes

I may update this notice. The date at the top shows the latest version.