Privacy policy
This site runs no analytics, no advertising pixels and no tracking cookies. What follows is the full account of the little data we do handle, and what happens to it.
1. Who is responsible for your data
The data controller is Logfile Studio LLC, Limited Liability Company (LLC), registered in Wyoming, United States under number 2026-002068764, trading as LOGFILE STUDIO and operating from Guechaine, Houmet Souk, Djerba 4195, Tunisia.
For anything in this policy, including access and deletion requests, write to privacy@logfile.studio. A person reads that address, not a ticketing robot. We answer within one business day and complete requests within 30 days.
2. What we collect, and why
2.1 The website chat (AI Concierge)
The chat bubble on this site is an AI assistant. What you type in it is sent to our server and forwarded to Groq, Inc. (United States), which runs the open weights language model that writes the answer. Your IP address is read to enforce a rate limit and to block abuse.
We do not store chat transcripts on our servers. The conversation lives in your browser for the length of the visit and is not written to any database of ours. Groq processes the message to produce a reply, as our processor.
2.2 The contact form inside the chat
If you ask us to get back to you, the chat offers a short form: name, phone number and your message. That is sent to a private team channel on Telegram so a human sees it quickly. Your IP address is used, again, only for rate limiting.
2.3 The AI Concierge demonstration
On the demonstration pages, messages you type are forwarded to our own demo environment at demo.logfile.studio, together with your IP address for rate limiting. It is the same assistant technology described in 2.1, running on our infrastructure for a live preview.
2.4 The site speed and visibility tool
Where the site offers to analyse a hotel website, the address you submit is sent to the Google PageSpeed Insights API to produce the score. We send the web address and nothing else. Do not submit a URL that contains personal information in its parameters.
2.5 Email, WhatsApp and booking a call
When you email us or write on WhatsApp, we hold what you send: your name, your contact details, the content of your messages and any documents you attach. WhatsApp messages travel through the WhatsApp Business Platform operated by Meta. If you book a call, we keep the slot, your name, your contact details and what you told us about your property so we can prepare for it.
2.6 Technical logs
Our host, Vercel Inc., United States (vercel.com), records standard server logs for every request: IP address, time, page requested, browser user agent. These exist to keep the site up and to investigate abuse. We do not use them to profile visitors.
2.7 Client project data
When you become a client, we process data on your behalf inside the systems we build for you, such as booking requests or concierge conversations from your own guests. There we act as your processor, not as controller, under the data processing terms attached to your contract. Client systems are isolated from one another: no notification, lead or statistic belonging to one client ever reaches another client's channel.
3. Legal basis for each use
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Chat messages | Answering your question | Steps before a contract, Art. 6(1)(b), and our legitimate interest in answering business enquiries, Art. 6(1)(f) |
| Contact form, email, WhatsApp | Replying, quoting, following up | Steps before a contract, Art. 6(1)(b) |
| IP address and rate limits | Security, abuse prevention | Legitimate interest, Art. 6(1)(f) |
| Invoices and business records | Accounting and tax obligations | Legal obligation, Art. 6(1)(c) |
| Case studies naming a client | Showing our work | Consent of that client, Art. 6(1)(a) |
4. Who else touches the data
We do not sell personal data. We have never sold personal data, and we do not share it for cross context behavioural advertising. The only third parties involved are the providers that make the service work:
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Website hosting and server logs | United States |
| Groq, Inc. | Language model that generates chat replies | United States |
| Telegram | Private channel where contact requests are delivered | Outside the EU |
| Meta Platforms | WhatsApp Business messaging, if you write to us there | United States and Ireland |
| Google (Workspace) | Our business email, and PageSpeed Insights for a website address you submit | United States |
We may also disclose data where the law requires it, or to defend a legal claim. Nothing else.
5. Transfers outside Europe
We are based in Tunisia and registered in the United States, and several of the providers above are in the United States. So if you write to us from the European Union or the United Kingdom, your data leaves that territory. Neither Tunisia nor the United States benefits from a general adequacy decision covering us.
For those transfers we rely on the standard contractual clauses published by the European Commission where the provider offers them in its terms, and, for the transfer to us of what you send us directly, on Article 49(1)(b): the transfer is necessary to answer your own request and to take steps towards a contract you asked for. If you would rather not send us data on those terms, use the phone number on the site instead.
6. How long we keep it
| Data | Kept for |
|---|---|
| Chat transcripts | Not stored on our servers at all |
| Contact requests in our team channel | 24 months from the last exchange, then deleted |
| Email and WhatsApp conversations | 3 years from the last exchange for prospects, contract duration plus 3 years for clients |
| Quotes, invoices and accounting records | 10 years, as required by law |
| Host server logs | Around 30 days, set by our host |
| Client project data | As instructed by that client, returned or deleted at the end of the contract |
7. Cookies and local storage
There is no cookie banner on this site because there is nothing to consent to. We run no analytics, no advertising pixels, no session recording and no third party trackers. The site sets exactly one cookie, named lang, which remembers the language you chose, and stores the same value in your browser's local storage. Both are strictly necessary to serve the site in the right language and neither is readable by anyone but this site.
Clear your browser data and both disappear. Nothing else is stored on your device.
8. Your rights
Wherever you are, you can ask us to show you what we hold about you, correct it, delete it, or stop using it. If you are in the European Union, the United Kingdom or another territory with equivalent law, you have the following rights over your personal data: access, rectification, erasure, restriction of processing, objection to processing based on legitimate interest, portability, and the right to withdraw consent at any time without affecting what was done before.
Write to privacy@logfile.studio. We answer within one business day and complete the request within 30 days. We may ask you to confirm your identity, which for most requests just means writing from the address we already have.
Complaints. If our answer does not satisfy you, you can complain to the data protection authority of the country you live or work in, for example the CNIL in France, the AEPD in Spain, the ICO in the United Kingdom, or the INPDP in Tunisia. You can also go to court.
EU representative.We are established outside the European Union and have not appointed a representative under Article 27 GDPR. Our processing of EU residents' data is occasional, limited to business enquiries and contracts with companies, involves no special categories of data and no large scale monitoring, which is the exemption in Article 27(2)(a). Write to us directly at the address above.
9. If you are in California
Under the CCPA as amended by the CPRA you have the right to know what we collect and why, to access it, to correct it, to delete it, and not to be discriminated against for asking. The categories we collect are identifiers, such as name, phone, email and IP address, and commercial or professional information about the property you run.
We do not sell your personal information and we do not share it for cross context behavioural advertising. We have not done so in the preceding twelve months, and we do not knowingly collect data from anyone under 16. To exercise a right, write to privacy@logfile.studiowith "privacy request" in the subject. An authorised agent may act for you with written proof.
10. Security
The site is served over an encrypted connection on every visit. Access to our systems is limited to the people who need it and protected by two factor authentication. Every product we build is separated per client at the storage, notification and reporting layers, so one client's data cannot surface in another client's system. If a breach ever affects your data and creates a risk for you, we will tell you and the relevant authority without undue delay.
11. Children
This is a business service. It is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has sent us data, write to us and we will delete it.
12. Changes
When we change how the site or our services handle data, this page changes with it and the date at the top moves. Material changes affecting existing clients are also sent by email.