Privacy policy

1. Who is responsible

The data controller is Metisly, Glyfada, Attica, Greece, VAT number (ΑΦΜ) 803431563 (registered with AADE on 13/10/2026), General Commercial Registry (ΓΕΜΗ) number 196778403000 (incorporated on 13/10/2026). Contact: info@metisly.ai.

2. What data we collect and why

We collect only what is needed to answer you and to run the website.

• Contact form: name, email address and your message. Purpose: to reply to your request. Legal basis: your consent (GDPR art. 6(1)(a)) and steps prior to a contract (art. 6(1)(b)).
• Mētis chat: the messages you type, and any name, email, phone number or booking details you choose to share. From the conversation we keep your name, email and phone number as a contact request (lead) in our customer system so we can get back to you. Purpose: to answer your questions, to call you back if you want and, if you ask, to book a consultation. Legal basis: art. 6(1)(b) and our legitimate interest in providing the service (art. 6(1)(f)).
• Analytics (only after you accept cookies): page views, traffic source and performance metrics via Vercel Analytics, Speed Insights and Google Analytics 4 (Google Ireland Ltd, with IP anonymisation and no Google Signals), without cross-site tracking. Legal basis: consent (art. 6(1)(a)).
• Server logs: IP address, browser type and the pages requested, kept briefly for security and to keep the site running. Legal basis: legitimate interest (art. 6(1)(f)).

3. Where the data goes

Form submissions and chat messages pass through the website's server to our automation platform (n8n), hosted on servers in the European Union. Chat history is stored in a Supabase database, also in the European Union, and leads in our internal customer system. To generate replies, chat messages are processed by an AI model provider (OpenAI) acting as a processor; they are not used to train models. Consultation bookings create an event in Google Calendar (Google Ireland Ltd). The website is hosted by Vercel Inc.; where data leaves the EEA, transfers rely on the EU Standard Contractual Clauses.

We do not sell personal data and we do not share it with advertisers.

4. How long we keep it

• Contact requests, leads and chat conversations: up to 24 months after the last contact, or until you ask us to delete them. An automated job runs daily and deletes records older than that.
• Client records: for the duration of the engagement and as long as tax law requires afterwards.
• Analytics data: aggregated and not linked to you as a person.
• Server logs: up to 30 days.

5. Your rights

Under GDPR articles 15 to 22 you can ask for access to your data, correction, deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time without affecting what was done before.

To exercise any right, email info@metisly.ai. We answer within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (ΑΠΔΠΧ, www.dpa.gr).

6. Cookies

We use only strictly necessary cookies and local storage (language and theme choice, your cookie decision, the Mētis conversation ID) and, only with your consent, analytics. Details and how to change your choice are in the cookie policy.

7. Security

All traffic to the site is encrypted (HTTPS). Access to stored data is limited to the two people who run Metisly and protected by strong authentication. Your browser never receives the address or access keys of our internal systems: the chat goes through our own server, with an origin check, a request limit and bot protection (Vercel BotID).

8. Changes

If we change this policy we update the date at the top. Material changes are announced on this page.