KISSICK DESIGN / PRIVACY

Privacy information

Draft notice · awaiting owner and legal review. The operator’s legal identity, privacy contact and final retention period have not yet been provided.

Project enquiries

The form saves your name, email, selected service, and any optional phone number, website and message. Configurator answers, the optional investment budget and recommended modules are attached to your enquiry. They help us understand your project and respond to your request.

We also save the submission time, language, source page, available campaign parameters and referrer, and the time and version of your acknowledgement. The system stores processing and notification status. Sending the form does not subscribe you to a newsletter.

Proposal and communication

The system may create a proposal draft from an enquiry using deterministic KISSICK pricing rules. AI is not allowed to set prices. A proposal can only be sent after internal preview, editing and approval. If the email-provider integration is configured, the recipient address, proposal content, and message/thread identifiers may be sent to the provider for delivery and CRM communication history.

Ask KISSICK

Ask KISSICK answers from the approved KISSICK knowledge base. If the Gemini integration is configured, the question and the approved service/FAQ context required to answer it may be sent to Google Gemini. Personal data from the project form is not automatically sent to the AI provider by Ask KISSICK. If Gemini is unavailable or not configured, the system falls back to the local knowledge base.

Demos and local preferences

The showcases use sample customers only. The essential kissick_demo cookie connects you to your own demo state for up to 24 hours. Demo records then expire and are cleared when a new demo session is opened. Configurator choices and an in-progress enquiry draft remain in your browser’s session storage until that session ends so they are not lost during language changes or navigation.

Security and infrastructure

The website runs on Sites hosting, with submitted records stored in Cloudflare D1. Abuse protection temporarily retains a hash derived from the IP address and a time window, rather than the original IP address. Expired protection records are cleared on the next protected request.

This version does not use marketing tracking. An optional internal notification integration may send the enquiry identifier and system events to an internal service configured by the owner.

Before final release

Before opening the site to external prospects, the owner must complete the operator details, privacy contact, retention periods, applicable legal basis, final list of external processors/providers, and the process for data requests and complaints. Until then, enter test data only.

Version: 2026-09-22 · draft