72hourai← Back
// legal

Privacy Policy

Last updated: 2026-05-13

Data Controller

This site and the "72hourai" project are operated by Georgios Thoidis, an independent individual based in Chamilo, Kilkis, Central Macedonia, Greece (postal code: 61200). Contact: 72Hourai@proton.me. "72hourai" is a personal project name and not a registered company.

What Data We Collect

  • Information you submit via WhatsApp or email when you reach out to discuss a project (e.g. project description, name, contact details). The on-site Chaos Terminal runs entirely in your browser — text entered there is not transmitted, stored, or logged by us.
  • WhatsApp messages: when you click a tier button, you are taken to WhatsApp to message us directly. Message content and metadata are processed by WhatsApp/Meta under their own privacy policy.
  • Technical data: IP address, browser/device type, pages visited, timestamps, referrer.
  • Cookies & local storage: a single consent flag stored in your browser's localStorage. We do not currently use third-party analytics or advertising cookies.

Lawful Basis (GDPR Art. 6)

  • Contract / pre-contract — to respond to your inquiry and deliver an engagement you have agreed to.
  • Legitimate interest — basic security logging and abuse prevention.
  • Consent — for any non-essential cookies or marketing communication.
  • Legal obligation — invoicing and tax records under Greek law.

Retention

  • Inquiry messages: up to 12 months after last contact.
  • Client project files & correspondence: 24 months after delivery, then deleted on request.
  • Invoices & tax records: retained for the period required by Greek tax law (currently 5–10 years).
  • Server logs: up to 30 days.

Processors & Sub-Processors

  • WhatsApp / Meta (Ireland / USA) — messaging channel used to discuss engagements.
  • Lovable Cloud — site hosting & backend infrastructure.
  • Email provider — for transactional and project communication.
  • Google (Gemini 3.1 Pro, Gemini 1.5 Pro) (USA / EU) — AI model inference for project analysis and deliverables, when AI processing is part of the engagement.
  • OpenAI (ChatGPT / GPT models) (USA) — AI model inference, when used in a client engagement.
  • Anthropic (Claude) (USA) — AI model inference, when used in a client engagement.
  • Gumloop (USA) — AI workflow orchestration, when used in a client engagement.
  • Make.com (Celonis / EU) — workflow automation, when used in a client engagement.
  • Zapier (USA) — workflow automation, when used in a client engagement.

International Transfers

Where data is transferred outside the EEA (e.g. to AI providers or Meta in the USA), we rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission.

Your Rights (GDPR)

You have the right to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw consent at any time. To exercise these rights, email 72Hourai@proton.me.

Right to Complain

You may lodge a complaint with the Hellenic Data Protection Authority (HDPA) — Kifissias 1-3, 11523 Athens, Greece — www.dpa.gr.

Children

Our services are not directed to anyone under 16. We do not knowingly collect data from minors.

Changes

Material changes to this policy will be reflected in the "Last updated" date above.