Bithart / Legal

Privacy policy.

Last updated: 30 October 2026

This policy explains what personal data bithart.com collects, why, who receives it, how long it is kept and the rights you have. Please do not submit passwords, confidential client records or sensitive personal information through this website.

Who is responsible

The controller of personal data collected through this website is Bithart, Amsterdam, Netherlands. Contact: contact@bithart.com.

We handle personal data in line with the EU General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (UAVG). Personal data we process for clients within a project is governed by the data processing agreement for that engagement, not by this policy.

What we collect and why

• Enquiries. Name, email, company and the project details you enter in the contact form, to understand and answer your request. Basis: your request and our legitimate interest in responding (GDPR Art. 6(1)(b) and (f)).
• Conversations with Bitsy, the AI guide. The messages you send, to generate a reply. Basis: your request.
• Technical data. IP address, browser and request information processed by our hosting provider to deliver and protect the site. Basis: our legitimate interest in a secure, working site.
• Analytics. Pages viewed, steps taken and approximate location, only if you allow analytics cookies. Basis: your consent.
• Advertising measurement. Whether a visit or enquiry followed one of our adverts on Meta or LinkedIn, only if you allow marketing cookies. Basis: your consent.

We do not sell personal data and we do not make decisions with legal or similarly significant effects about you by automated means alone.

Project enquiries

The enquiry form asks for contact, company and project details. Required fields are marked. The form validates the information on the server and applies basic abuse protection.

When the form offers an email draft, submitting the form does not send an enquiry to Bithart. You choose whether to open and send the draft from your email application. If direct delivery is configured, the form instead identifies the action as sending an enquiry. Its acknowledgement confirms acceptance by the delivery service, not delivery to an inbox or human review. A submission reference helps identify the enquiry.

Agent-submitted introductions

Our public agent interface describes Bithart’s services without requiring personal details. Submitting a brief requires an approved integration credential and the person’s permission for that specific introduction. The sender supplies the approved project and contact details, along with a permission timestamp. We do not independently verify that attestation. Do not submit prospect lists, attachments or information you are not authorised to share.

When enabled, direct submissions are passed to the configured email or intake service for Bithart’s review. They are not sent to an AI model by the enquiry endpoint. The application does not retain enquiry bodies in a database or application logs; the delivery service and Bithart’s inbox may retain submitted information.

The project diagnostic

The three-question diagnostic runs in your browser. It does not require an email address. Choosing to discuss the resulting brief carries your selected answers into the contact page; the contact form explains the next action before you submit.

Bitsy, the AI guide

When you send a message to Bitsy, the current conversation is sent through Bithart’s server to Anthropic to generate a reply. Anthropic processes that content under its applicable service terms. AI replies can be mistaken and do not create a contract, quote or confirmed booking.

Opening Bitsy or typing a draft does not send anything. This application does not save or log chat transcripts. Conversation state is held in browser memory, not cookies or local storage, and reloading the page clears it. This does not erase information already processed by Anthropic or technical records kept by infrastructure providers. Basic abuse controls use a hashed network address and request counts held temporarily in server memory; they do not store your message content.

Cookies and similar technologies

We store your cookie choice in your browser. Analytics and marketing tools load only after you allow them, and you can change your choice at any time through “Cookie settings” at the bottom of every page. The cookie policy lists each cookie, who sets it and how long it lasts. At the date of this policy no analytics or marketing tool is active on the site yet.

Who receives personal data

• Vercel hosts the website and processes technical request data.
• Anthropic generates Bitsy’s replies from the messages you send.
• Our email and intake providers deliver enquiries to Bithart’s inbox.
• Google (Google Analytics 4), only with your analytics consent.
• Meta (Meta Pixel) and LinkedIn (Insight Tag), only with your marketing consent. Meta and LinkedIn also use this data for their own purposes as independent controllers, under their own privacy policies.
• Professional advisers and authorities where the law requires it.

International transfers

Several of these providers process data outside the European Economic Area, mainly in the United States. For these transfers we rely on adequacy decisions or the European Commission’s standard contractual clauses.

How long we keep it

• Enquiries and related emails: up to 24 months after our last contact, or longer if they become part of a client engagement and its records.
• Bitsy conversations: not stored by this website; the browser clears them on reload.
• Analytics data: up to 14 months.
• Your cookie choice: 12 months, after which we ask again.

Security

We use encrypted connections, server-side validation, access controls and abuse limits, and we keep the data we collect to what is needed. No website can be guaranteed fully secure; if a breach affects your personal data and the law requires it, we will inform you and the competent authority.

Your rights

Depending on the law that applies to you, you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct inaccurate data or delete data we no longer need;
• restrict or stop processing, including for direct marketing;
• transfer data you gave us to you or another provider;
• not subject you to a decision based solely on automated processing with significant effects.

Where we rely on consent, you can withdraw it at any time through “Cookie settings” or by emailing us; this does not affect processing that took place before. Send requests to contact@bithart.com. We reply within 30 days and may ask you to confirm your identity. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the data protection authority in your country.

Children

This website is intended for businesses and is not directed at people under 18. We do not knowingly collect their personal data.

Changes

We update this policy when the site or the law changes. The date at the top shows the latest version. If a change affects what we do with data you consented to, we will ask for your consent again.