Privacy Policy
Contents
1. Who we are
This website is operated by Metatron Marketing Ltd ("we", "us", "our"), a company registered in England & Wales.
- Company number: 16220417
- Registered address: Monomark House, 27 Old Gloucester Street, London, England, WC1N 3AX
- Website: meta-ai.consulting
- Contact email: privacy@meta-ai.consulting
We are the data controller for personal data processed through this website. We are subject to the UK GDPR, the EU GDPR (given that we serve users in the European Union, including Belgian residents), and applicable Belgian and UK consumer data-protection law.
2. What data we collect
We keep data collection to the minimum necessary. Here is what we collect and why:
| Category | What | How collected |
|---|---|---|
| Chat messages | The text you type into the AI chat widget on our site | Submitted voluntarily by you when you use the chat |
| IP address | Your network IP address | Automatically logged by our web server on each request |
| Technical metadata | Browser type, operating system, HTTP referrer, page requested, timestamp | Automatically collected in server logs |
| Font requests | Your IP address and browser headers sent to Google Fonts | Automatically, when your browser loads our fonts from Google |
We do not collect: names, email addresses, payment information, precise location data, or any other personal data unless you voluntarily share it in the chat. We have no analytics or tracking pixels on this site.
Sensitive data: Please do not share special-category data (health, financial, political, religious, or similar information) in the chat widget. The system is not designed to handle it securely.
3. How we use your data
We use the data we collect for the following purposes:
- Providing the AI chat service — your message is sent to an AI model to generate a response and returned to you.
- Security & abuse prevention — server logs (including IP addresses) are used to detect and block malicious traffic and protect our infrastructure.
- Service reliability — technical metadata helps us diagnose errors and improve uptime.
- Compliance — we retain minimal logs as required by law.
We do not use your data for advertising, profiling, or selling to third parties.
4. Legal basis (GDPR)
We process personal data under the following Article 6 lawful bases:
| Processing activity | Legal basis |
|---|---|
| Sending your chat message to an AI model and returning a response | Art. 6(1)(b) — performance of a contract / taking steps at your request (you voluntarily initiate the interaction) |
| Server logs, IP address, technical metadata | Art. 6(1)(f) — legitimate interests (protecting our systems, preventing abuse, ensuring availability) |
| Compliance with legal obligations (e.g., log retention required by law) | Art. 6(1)(c) — legal obligation |
For EU/EEA users (including Belgian residents): you have the right to object to processing based on legitimate interests at any time. See Section 9.
5. Data processors & third parties
We rely on the following sub-processors to operate the chat service. Each receives only the data necessary to perform its specific function.
AI Model Providers
Your chat messages are forwarded to one or more of the following AI providers to generate a response. By using the chat, you acknowledge this transfer.
| Provider | Service | Privacy reference |
|---|---|---|
| Anthropic, PBC | Claude AI models | anthropic.com/legal/privacy |
| DeepSeek | DeepSeek AI models | deepseek.com/privacy |
Important: DeepSeek is operated by a company based in the People's Republic of China. If you have concerns about data being processed outside the EU/UK, please do not use the chat widget.
Google Fonts
Our website loads fonts from Google LLC (fonts.googleapis.com / fonts.gstatic.com). Your IP address and browser information are sent to Google when fonts load. See Section 7 for details and how to opt out.
Hosting provider
Our web server is operated by a hosting provider acting as a data processor under a data-processing agreement. Your IP address and request data pass through their infrastructure.
We do not sell personal data to any third party and do not share data with advertisers.
6. AI processing disclosure
EU AI Act notice: The chat assistant on this website is an AI system. You are interacting with an artificial intelligence, not a human. Responses are generated automatically and may be inaccurate, incomplete, or unsuitable for your specific situation.
In accordance with the EU AI Act (Regulation 2024/1689), we disclose that:
- The chat widget is powered by a large language model (AI).
- Automated responses are generated — no human reviews your conversation in real time.
- We do not use the chat for high-risk AI applications as defined by the EU AI Act (e.g., employment decisions, creditworthiness, law enforcement).
- You always have the right to seek human follow-up by contacting us directly (see Section 12).
AI-generated content is provided for informational and exploratory purposes only. It does not constitute professional, legal, medical, or financial advice.
8. Retention
| Data type | Retention period | Reason |
|---|---|---|
| Chat message content | Not stored by us beyond the duration of the API call (forwarded to AI provider and response returned) | No persistent storage in our own database |
| Server access logs (IP, requests) | Up to 90 days | Security monitoring, abuse prevention |
| Error/diagnostic logs | Up to 30 days | Service reliability |
Data held by AI providers (Anthropic, DeepSeek) is subject to their own respective retention policies — please review their privacy policies linked in Section 5.
9. Your rights
Under UK GDPR and EU GDPR you have the following rights. Belgian residents also have rights under Belgian data-protection law and may contact the Belgian DPA.
- Access — request a copy of personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to pause processing while a dispute is resolved.
- Objection — object to processing based on legitimate interests (Art. 6(1)(f)).
- Portability — receive your data in a portable format where processing is automated and based on consent or contract.
- Withdraw consent — where processing is based on consent, withdraw at any time without affecting prior lawfulness.
To exercise any right, email privacy@meta-ai.consulting. We will respond within 30 days.
Given the minimal data we hold (primarily transient server logs), we may not always be able to identify data relating to a specific individual unless you can provide additional verification information.
10. International transfers
Your data may be processed outside the UK and EU/EEA:
- Anthropic (USA) — transfers to the United States are covered by Standard Contractual Clauses (SCCs) and Anthropic's data-processing commitments.
- DeepSeek (China) — China does not have an EU adequacy decision. Data is transferred on the basis of your implicit agreement to use the service, supplemented by technological safeguards. If you are uncomfortable with this, please do not use the chat widget.
11. Security
We take reasonable technical and organisational measures to protect personal data, including HTTPS encryption in transit and access controls on our infrastructure. No internet transmission is 100% secure; we cannot guarantee absolute security.
If you discover a security vulnerability, please report it responsibly to privacy@meta-ai.consulting.
12. Contact & complaints
For any questions about this policy or your personal data, contact us at:
- Email: privacy@meta-ai.consulting
- Post: Metatron Marketing Ltd, Monomark House, 27 Old Gloucester Street, London, England, WC1N 3AX
Supervisory authority
You have the right to lodge a complaint with a supervisory authority:
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- Belgium / EU: Autorité de protection des données / Gegevensbeschermingsautoriteit (APD/GBA) — dataprotectionauthority.be
We would always appreciate the opportunity to address your concern first before you approach a supervisory authority.