Privacy policy
What we collect, why, and how little of it there is.
Last updated:
The short version
This site sets one cookie (to remember your language), runs no analytics, and loads nothing from any third party — your browser talks only to cglabs.gr. The AI assistant runs on our own hardware, so what you type into it is never sent to OpenAI, Anthropic, Google or anyone else.
Who we are
CG Labs L.P. (Ε.Ε. under Greek law), Athens, Greece. For anything in this policy, including access, correction or deletion requests, write to [email protected] and we will reply within one business day.
What we collect
From the contact form: your name, email address, the project type and budget range you select, and the message you write. From the booking page: your name, email and the slot you choose. From the AI assistant: the conversation itself, and an email address only if you choose to give one. Nothing else. We do not profile you, and we do not track you across sites.
Why, and on what basis
We use it to reply to you and to prepare a proposal — that is the lawful basis of taking steps at your request prior to entering a contract (GDPR Art. 6(1)(b)), and our legitimate interest in responding to business enquiries (Art. 6(1)(f)). We never use it for marketing you did not ask for, and we do not sell or share it.
How long we keep it
Enquiries and booking records: up to 24 months, so we can pick up a conversation you started last year. Assistant conversations: up to 12 months, used to improve how the assistant answers. Ask us to delete any of it sooner and we will, without asking why.
Who else touches it
Cloudflare (CDN and DNS, EU edge) sees request metadata in transit. Our email provider delivers the messages you send us. The site, its database, the booking calendar and the AI model all run on infrastructure we operate ourselves — there is no third-party AI processor, no analytics vendor, and no advertising network involved.
Your rights
You can ask for a copy of what we hold, have it corrected, have it deleted, restrict or object to how we use it, and receive it in a portable format. Email [email protected]. If we get it wrong, you can complain to the Hellenic Data Protection Authority (dpa.gr).
Clients' data
When we build for you, we act as your processor under a DPA. We sign an NDA before the first technical call if you want one. We do not train models on your data, and we do not reuse your code on other projects.