Data controller and contact
The controller of personal data processed through this website is Aleksander Sakwarelidze, operating as:
ALEKSANDER SAKWARELIDZE whyAI
Sole proprietorship (indywidualna działalność gospodarcza)
Registered address: ul. Kobielska 23 lok. 121, 04-359 Warszawa, Poland.
Polish tax identification number (NIP): 1132988919. Business registry number (REGON): 381896202.
Business activity commenced on 1 December 2018.
For questions about this website or your personal data, write to privacy@whyai.ai or hello@whyai.ai.
Enquiries, bookings and resources
When you contact us, request a resource or book a call, we use the contact details and information you provide to handle that request and any agreed follow-up. This may include your email, name, company, role and message. Providing the information is voluntary; we need a contact address to reply. Please do not include confidential client information or sensitive personal data.
We process requests about a potential engagement to take steps at your request before a contract, and other correspondence in our legitimate interest in responding to enquiries and running the business. Sending an enquiry does not subscribe you to marketing.
Newsletter
We send marketing emails only when you opt in. You can withdraw your consent using the unsubscribe link in an email or by contacting us. Withdrawing consent does not affect processing that was lawful before withdrawal.
Basic service statistics
Independently of optional analytics, our server increments daily totals for requests to public pages and successful, rejected or failed form requests. These counters contain only the UTC date, a predefined page or page category, the request category and a total. They contain no IP addresses, browser identifiers, cookies, query parameters, referral URLs or form contents. We do not join them to contact records or PostHog. They measure requests, not unique visitors; known bots and prefetch requests are excluded where detectable. Aggregate totals are kept for trend reporting.
This measurement adds no tracking script or browser storage. Hosting and security services separately process technical connection data in our legitimate interest in operating and protecting the website.
Optional analytics
PostHog analytics loads only after you accept it. It measures page views, selected link and tab clicks, booking steps, anonymous browser identifiers, device category, approximate location inferred from your network address, and page performance. We classify referral sources into broad categories such as search or LinkedIn; we do not send raw search terms or campaign query strings. We do not send form answers, names or email addresses to analytics, and session recordings mask page text and exclude forms, input fields and the embedded calendar. Recordings show page layout, scrolling and pointer activity to help us improve usability. Network bodies, headers, console logs and media are not recorded.
Analytics uses cookies and browser storage to recognise a browser across visits. Campaign attribution is stored in session storage only after analytics consent and cleared when consent is withdrawn. Your analytics choice is stored separately so the site can remember it. Use Analytics preferences in the footer to accept or decline analytics at any time. Declining stops further analytics and session recording. It does not prevent you from reading the site, contacting us or booking a call.
Service providers
The site uses Vercel for hosting and delivery of pages; Supabase for contact and account data; Resend for email delivery; Cal.com for booking; and PostHog's EU service for optional analytics. Providers may receive technical connection information, including your IP address, when your browser or our server connects to them. Our server retrieves public availability from Cal to display the calendar automatically, independently of optional analytics. Choosing a time or the direct calendar link takes you to Cal to enter your details and confirm the booking; Cal then receives your connection information directly.
Providers process data under their applicable service terms and data processing arrangements. An EU service endpoint does not mean every support or subprocessor operation takes place in the EU. Where processing involves a transfer outside the EEA, applicable transfer safeguards are required.
How long data is kept
We retain enquiry and booking information while it is needed to handle the request, manage an engagement or resolve related claims. Legal record-keeping requirements may require longer retention. Newsletter details are kept while you remain subscribed; a limited suppression record may be retained to respect an unsubscribe request. Analytics events are subject to the PostHog project's retention period, currently up to one year. Session recordings are retained for 30 days. You can ask us about a particular record or request its deletion.
Your choices and rights
Depending on the applicable conditions, you can request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent. Contact us using the addresses above. We may ask for information needed to verify your request and normally respond within one month.
You can lodge a complaint with your local data protection authority, including Poland's President of the Personal Data Protection Office. We do not use this website's analytics to make solely automated decisions with legal or similarly significant effects on you.