Privacy
Short and without legal jargon. If something isn't clear, just ask.
Who is responsible
This website and its email list are run by Reinis Komuls, a self-employed person registered in Latvia. I am responsible for everything described below. You can write to me directly; the email address is at the bottom of the page.
This English page is a translation of the Latvian privacy notice. If they differ, the Latvian version applies.
In short
| Purpose | What data | Who else receives it | How long |
|---|---|---|---|
| AI news by email, in Latvian (your consent) | first name, last name, email, time of signup | email delivery | while you're on the list; after you unsubscribe the address stays with a mark, until you ask me to delete it |
| Free website review (your request) | name, email, website address or social media link, type of site, what a customer should do on the site, and where you came to the request page from | website hosting, form notifications, my email, AI assistant, work files, phone notifications | the request record in the website's data store deletes itself 12 months after the request; correspondence and notes in my work list stay until you ask me to delete them. After the review I only send emails related to it (see below) |
| Consultation or website request (your request) | name, email, chosen option, business or field, your description, the software the work happens in or your current website and social media links, and the AI tools you use (if you filled them in) | website hosting, form notifications, my email, AI assistant, phone notifications | I reply to the same email; the request record in the website's data store deletes itself 12 months after the request, correspondence stays until you ask me to delete it |
| Client testimonial (your consent) | name, business, rating, text, whether it may be published and, if you came from a review email, which conversation it belongs to | website hosting, form notifications, my email, phone notifications | until you withdraw consent |
| Accounting (legal obligation) | invoices: who ordered what, when and for how much | my email | as long as accounting law requires source documents to be kept |
| Visit statistics (legitimate interest) | pages opened, events, source, country, device type | statistics tool, website hosting | up to 6 months |
| Your email to me (legitimate interest) | name, email, content of the email | email forwarding, my email, AI assistant, phone notifications | while I need the correspondence or until you ask me to delete it |
What I collect
For the news signup: the first name, last name and email address you type into the form. The name is only used to address you in the email. Together with them, the email service stores the time and source of the signup, as proof that consent was actually given. When you sign up, I don't store your IP address.
While the tab is open, your browser remembers where you came from (for example, Google or LinkedIn) and which page you opened first. It's not a cookie, and it disappears when you close the tab. If you request a review, this line is sent along with the request. To keep bots from flooding the forms, I keep a code calculated from your IP address, not the address itself, for one hour; after that it deletes itself.
For visit statistics I use a tool that counts which pages people open, which buttons they press and where they came from, and it sets no cookies. It tells repeat visits apart using technical data (browser, device, IP address) mixed with a random value (a so-called salt) that changes at the start of each month. So within a month it can tell that the same visitor came back, but it doesn’t know your name or email. Requests to the statistics tool are forwarded by this website’s server, and your IP address goes along with them; the tool uses it to determine the country. The tool and its service providers process data in the EU and the USA. I need this to understand what works on the site and what doesn’t.
I deliberately don't use Google Analytics: it sets cookies, and then every page would need a consent banner. That's why there isn't one here.
The service hosting this website shows me general visit statistics: how many times pages were opened and from which countries. It is collected on the server side, without cookies, and I only see totals.
Why I collect it
To send you AI news in Latvian. Sometimes I also write about my own news: when I've built or added something. I do nothing else with the address.
What you enter in a review, consultation or website request I use only to prepare your review or reply to your request.
Together with the review I send an offer for fixing what I found. After that, up to three short emails about it, the last one asking for a testimonial. If you reply, the series stops. I don't add you to the news list.
An AI assistant, the same one that sorts my email, helps me prepare reviews and replies. I may use errors found in reviews in my own posts, but without your name, business or website address. I use testimonials to understand what works; if you allowed it, I show yours on this website with your name and business.
If you email me, the purpose is to reply. An AI assistant helps me sort my email: it detects the topic and urgency, archives ads and mass offers on its own and, if needed, prepares a draft reply. It never sends anything by itself.
Legal basis
The law requires a basis for every kind of processing, so here they all are: I send emails because you agreed to it (consent); I process review, consultation and website requests because you asked for it (steps at your request before a contract); I send emails after a review because you requested the review (legitimate interest); I keep and publish testimonials because you agreed to it (consent); I keep invoices because accounting law requires it (legal obligation); I keep proof of consent because the law requires me to be able to show that I send emails with your consent (legal obligation). The basis for visit statistics is legitimate interest: understanding what works on the site. The basis for sorting email with an AI assistant is also legitimate interest: replying on time and not missing important emails.
There is no automated decision-making or profiling on this website. The AI assistant only sorts my email, and that has no legal or similarly significant effects on you.
How long I keep it
While you're on the list. When you unsubscribe, the address stays on the list with a mark that you've unsubscribed; that's needed so nothing gets sent to you by accident. If you want it gone completely, tell me and I'll delete it. Retention periods for other data are in the table at the top of this page.
Where the data is stored
I don't sell or rent out addresses. Data is processed by these service providers and their sub-processors. I hand data to authorities if the law requires it.
- Email list and delivery: MailerLite (Ireland), data center in the EU.
- Website hosting and data store: Cloudflare (USA). When you open the site, it briefly sees your IP address. That's a technical necessity, not data I collect. Form data is kept in its data store.
- Form notifications and confirmation emails: Resend (USA).
- Statistics: Umami (USA), data in the EU and the USA.
- My email: Google (Gmail, Google Ireland Limited; data may be processed in the USA). A Google spreadsheet also holds the AI assistant's log: sender name and address, subject and a short reason for how the email was sorted.
- Email forwarding, if you write to an @reiniskomuls.lv address: ImprovMX (USA). Incoming email is briefly stored in France and deleted after delivery. The subject and sender may stay in the service log, and US servers may also be used for forwarding.
- AI assistant: Anthropic (contract with Anthropic Ireland; data may be processed in the USA). To sort email it receives the sender, subject and email text up to 3,000 characters, but not attachments, and for a draft also my previous emails to you. To prepare reviews and replies it also receives what you entered in the request and my correspondence with you. It may not use this content to train models.
- Phone notifications: Pushover (USA). A notification may contain your name, email, business, website address or email subject. It is deleted from Pushover's servers after delivery, or after 21 days if undelivered. For delivery it uses Apple or Google.
- Work files and their backups: private storage (USA).
Cloudflare, Resend and Google LLC are certified under the EU-US Data Privacy Framework, for which the European Commission has recognized an adequate level of protection. The work file storage is certified under the same framework. Umami and Anthropic transfer data to the USA under the European Commission's standard contractual clauses. You can ask me for a copy. ImprovMX states that the standard clauses are part of its data processing agreement, and Pushover that it uses them where the law requires it.
Your rights
You may ask me to show what data I have about you, to correct or delete it, to send it to you in a file, or to stop processing it. You can object to processing based on legitimate interest, including sorting your emails with an AI assistant.
You can withdraw consent at any time, and that doesn't affect what was done with your consent before.
You can also contact the Data State Inspectorate of Latvia about data processing.
How to unsubscribe
Every news email has an unsubscribe link at the bottom. Click it and nothing more will arrive. Emails after a review stop if you reply to any of them. If you want the address deleted completely, not just marked, write to me and I'll delete it. If you're also a client, I'll keep the invoices the law requires until the period ends and tell you which ones they are.
If this page changes
When something in data processing changes, I update this page. This version is effective from November 6, 2026.
Contact
For any question about data, or anything else about this website and its content, write to info@reiniskomuls.lv.