Privacy notice

MADESAI is the controller of personal data collected through this website. This means MADESAI decides why and how that data is used.

MADESAI has not appointed a data protection officer because this is not currently required for its activities. For privacy questions or requests, use the email address shown above.

When you send an inquiry or book a meeting, MADESAI may collect:

• your name and email address;
• your organization and country;
• your optional LinkedIn URL and any optional links you provide;
• your inquiry categories and project description;
• your optional timeline, budget, and rate indication;
• booking details you submit through Calendly, such as meeting time, contact details, organization, topic, website or LinkedIn link, short context, and calendar-related details needed to manage the meeting;
• the requested service or partner context when you follow a relevant website link;
• whether you requested company details for a referral partner, your stated purpose for that request, and your consent choice about sharing the request with that partner;
• when you request MADESAI Compass access: your name, work email, organization, country, the kind of resource you are seeking, and any optional context you provide;
• technical information needed to operate, secure, and understand use of the website, such as requested URLs, date and time of requests, IP address, approximate location, device type, browser, operating system, user agent, referrer, host, status code, cache status, and security-event data handled by Cloudflare.

The website does not ask you to upload files at this stage. Please do not submit passwords, confidential documents, special-category personal data, or other sensitive information through the form.

MADESAI does not currently use inquiry data for email newsletters or automated marketing. If that changes, a suitable legal basis and an appropriate notice will be provided.

Your name, email address, country, short description, privacy acknowledgement, and at least the information needed to understand your inquiry are required so MADESAI can respond meaningfully. For company-details requests, a company email address, selected referral partner, stated purpose, and partner-sharing consent are required before non-public partner details are shown or shared. For Compass access, name, work email, organization, country, resource need, and privacy acknowledgement are required. Other fields are optional. If required information is not provided, MADESAI may not be able to answer the inquiry or provide the requested access path.

Personal data is shared only where reasonably necessary with service providers acting on MADESAI's behalf or where required by law. Current categories include:

• Cloudflare, which hosts, protects, caches, and provides traffic, performance, and security analytics for the website;
• Formspree, which processes website inquiries and forwards them to MADESAI;
• Calendly, which provides the public booking page used to schedule discovery meetings;
• Zoho Mail, where MADESAI email is handled through Zoho Mail and receives inquiry notifications and correspondence;
• LinkedIn, when you choose to visit MADESAI's LinkedIn pages or provide a LinkedIn profile or company-page link;
• the selected referral partner, where you request company details and give permission for MADESAI to share your name, company email, organization, and stated purpose so the partner understands the source and context of the request;
• professional advisers or public authorities where this is necessary to meet legal obligations or handle a dispute.

When you use the booking link, you leave the MADESAI website and submit booking information directly to Calendly. Calendly explains how it handles personal data in its Privacy Notice.

After a Compass access request, you may be offered a link to a public Notion site. Information you submit through the MADESAI form is processed by Formspree and is not automatically entered into Notion. If you open Compass, Notion's own privacy and technical practices apply to that external visit.

You can review the relevant third-party notices here: Cloudflare Privacy Policy, Formspree Privacy Policy, Formspree Terms of Service, Formspree Security, Calendly Privacy Notice, Zoho Privacy Policy, Zoho Mail Data Privacy, and LinkedIn Privacy Policy.

Some service providers may process data outside the European Economic Area. For example, Formspree states that its services are hosted in the United States and that it relies on Standard Contractual Clauses as a data processor. Calendly is also a third-party booking provider and may process booking-related data outside the EEA under the safeguards described in its own legal notices. Where required, MADESAI uses providers that offer an applicable transfer mechanism or other appropriate safeguard.

• Inquiries that do not result in an engagement are normally deleted or anonymized within 12 months after the last meaningful contact.
• Records connected with an active or completed client relationship are retained only as long as needed for the engagement and applicable legal, accounting, tax, and dispute-handling requirements.
• Security, traffic, and performance records are retained only as long as reasonably needed for website protection, troubleshooting, analytics review, and investigation, subject to the retention settings and policies of the relevant provider.

MADESAI periodically reviews whether records are still needed.

Subject to the conditions in applicable law, you may ask MADESAI to:

• give you access to your personal data;
• correct inaccurate or incomplete data;
• delete data that is no longer needed;
• restrict certain processing;
• provide portable data where the right applies;
• consider an objection to processing based on legitimate interests.

You may send a request to the email address above. MADESAI may ask for information needed to confirm your identity.

If you ask MADESAI to delete personal data that MADESAI controls, MADESAI will review the request and delete or anonymize data where required and where no stronger legal reason requires retention. Some records may need to be kept for contract administration, tax and accounting obligations, dispute handling, security, or legal claims.

If personal data was provided to MADESAI by a client or another organization for work that MADESAI supports on that client's behalf, that client or organization may be the controller of the data. In that case, MADESAI may not be able to remove the data on its own and may need to refer the request to the relevant controller or assist them with the request. MADESAI also cannot directly delete data held in third-party systems controlled by providers or other organizations; those providers' own privacy notices and request processes may apply.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

MADESAI does not use automated decision-making or profiling to decide whether to accept or reject your inquiry.

MADESAI does not currently use advertising cookies. The website uses essential website services and Cloudflare traffic, performance, caching, and security analytics so MADESAI can keep the site available, understand broad traffic patterns, identify errors or abuse, and see which public pages are being used.

Cloudflare analytics may process request metadata such as IP address, requested path, host, country, device type, browser, operating system, user agent, status code, cache status, and referrer. MADESAI uses this information for website operation, security, performance, and content-improvement purposes, not for advertising or automated decisions about individual visitors.

The website also shows a small cookie/privacy notice. When you dismiss it, the site stores that choice in your browser's local storage so the notice does not keep reappearing. This local storage entry is not used for advertising.

The website is prepared for optional privacy-friendly page analytics, such as Plausible, so MADESAI can understand which pages are useful and whether visitors move toward contact or booking actions. Plausible analytics remain inactive until enabled in the site configuration. If additional analytics are enabled, this notice and the website banner should identify the provider and purpose clearly.

The website may link to third-party websites such as LinkedIn or Calendly. Their own privacy notices apply when you visit them. The MADESAI website links to Calendly rather than embedding the Calendly scheduling widget, so the Calendly booking page and its cookie or tracking choices are controlled by Calendly when you open that booking link.

This notice may be updated when the website, MADESAI's processes, or its service providers change. The latest version will remain available on this page.