Privacy Policy
Last updated: 8 August 2026
Operator: Meryem Ünüvar
Contact: meryem9907@googlemail.com
Website: https://about-me-with-ai-chatbot.onrender.com/
This privacy policy explains how personal data is processed when you visit this portfolio website and use the AI chatbot.
1. Who is responsible?
I am the controller of this website:
Meryem Ünüvar
Email: meryem9907@googlemail.com
2. What this site does
This is a personal portfolio for recruiters and visitors. It presents information about my background and includes an optional AI chatbot that answers questions about my profile using my own knowledge base.
You do not need an account to use this site.
3. What data is processed?
3.1 Server and hosting data
When you visit the site, the hosting provider may automatically process technical data that is typically required to deliver the website, for example:
- IP address
- Date and time of the request
- Browser type / user agent
- Referrer URL
- Requested pages / status codes
Purpose: To operate, secure, and maintain the website.
Legal basis (GDPR): Art. 6(1)(f) — legitimate interest in providing a secure, functional website.
Hosting: The site and/or API may be hosted by Render. Their privacy policy applies to their infrastructure: https://render.com/privacy.
3.2 Chatbot messages
If you use the chatbot, the text you enter (your prompt) is sent to my backend API via an HTTP POST request body (not in the URL query string) and then to Google’s Gemini API to generate a reply. The active UI language may be sent as an Accept-Language header andlocale query parameter so replies can match your language.
Processed data may include:
- The content of your chat messages / questions
- Temporary technical request data needed to process the stream
Purpose: To answer questions about my professional profile.
Legal basis (GDPR): Art. 6(1)(a) — consent (you choose to send a message); and/or Art. 6(1)(f) — legitimate interest in offering an interactive portfolio feature.
Important: Please do not enter sensitive personal data (e.g. health data, passwords, ID numbers, confidential company information).
3.3 Local storage in your browser
The site may store data locally in your browser (localStorage), including:
- Theme preference (
light/dark/system) - Optional chat save preference (
chat_save_opt_in_v1) - Recent chat messages (
chat_state_v1) — only if you explicitly enable “Save chat on this device”
This data stays on your device and is not uploaded as a separate profile. Clearing site data in your browser removes it. Chat history is not saved by default; if you opt in, messages are stored only in your browser so the conversation can survive refresh. It is not uploaded as a saved account history on my servers. You can clear saved chat from the chat UI. Prompts you send are still transmitted to the chatbot API as described in section 3.2. Draft input is not persisted.
Purpose: Convenience (theme; optional chat restore).
Legal basis (GDPR): Art. 6(1)(a) — consent for optional chat persistence; Art. 6(1)(f) and/or Art. 6(1)(a) for theme preference as a non-essential UX preference.
3.4 No tracking cookies / analytics (current setup)
This portfolio currently does not use advertising cookies or third-party analytics tools such as Google Analytics (to the best of my knowledge of the application configuration). If that changes, this policy will be updated.
4. Recipients / processors
Your chatbot prompts may be processed by:
| Recipient | Role | Purpose |
|---|---|---|
| Hosting provider (e.g. Render) | Hosting / infrastructure | Serve website and API |
| Google (Gemini API) | AI model provider | Generate chatbot responses |
When data is sent to Google Gemini, Google’s terms and privacy policy apply for that processing: https://policies.google.com/privacy and Google’s generative AI / Gemini terms.
My knowledge base used for retrieval (RAG) contains my own portfolio information, not visitor profiles.
5. Transfers outside the EU/EEA
Depending on the hosting and AI provider, data may be processed on servers outside the EU/EEA (for example in the United States). Where required, such transfers rely on appropriate safeguards (e.g. Standard Contractual Clauses) provided by those services.
6. Retention
- Hosting/server logs: according to the host’s retention settings / short technical necessity
- Chat prompts on the server: processed to generate a response; I do not intentionally operate a long-term visitor chat archive in the application
- localStorage: until you clear it or remove chat history in the UI
7. Your rights (GDPR / comparable laws)
If applicable under GDPR or similar laws, you may have the right to:
- Access your personal data
- Rectification
- Erasure
- Restriction of processing
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent at any time (without affecting prior lawful processing)
- Lodge a complaint with a supervisory authority
To exercise these rights, contact: meryem9907@googlemail.com
Because most chatbot use does not create a registered user account, please describe the request clearly (e.g. time, approximate message content). Data held only in your browser can be deleted by clearing local storage / site data.
8. No obligation to provide data
You can browse the portfolio without using the chatbot. Using the chatbot is optional. If you do not send messages, no chat content is transmitted for AI processing.
9. Children
This site is intended for professional visitors (e.g. recruiters) and adults. It is not directed at children.
10. Changes
I may update this privacy policy when the website or processing practices change. The “Last updated” date will be revised accordingly.
11. Contact
Questions about privacy:
Meryem Ünüvar
Email: meryem9907@googlemail.com