Privacy Policy

Effective Date: August 13, 2026

AI With Nico ("we," "us," "our," "AI With Nico") operates aiwithnico.com (the "Site"). This Privacy Policy explains what information we collect, why, how long we keep it, and what rights you have. AI With Nico is currently operated by Nico Lafakis as a sole proprietorship.

1. Information We Collect

We collect only the categories described below. We do not sell your personal data, we do not use ad pixels, and we do not engage in cross-site ad tracking of any kind.

a0. Site analytics. We measure how the Site is used in two privacy-preserving ways:

• Plausible Analytics, a cookieless analytics service. It sets no cookie, stores no identifier on your device, and does not track you across other sites.
• A first-party analytics identifier of our own. On your first visit we generate a random identifier (it contains no personal data and cannot identify you) and store it in your browser's localStorage and in a first-party cookie for up to 400 days, so we can tell returning visits from new ones and understand which page first brought you here. It is used only on this Site - there is no cross-site tracking, no fingerprinting, and no sharing of this identifier with anyone.

Opt-out: if your browser sends the Do Not Track (DNT) or Global Privacy Control (Sec-GPC) signal, we honor it before anything is stored - no identifier is generated, no cookie or localStorage entry is written, and no analytics event is recorded. The Site works exactly the same either way. In both systems your IP address is never stored (see item e below).

a. Newsletter signups. If you use a "keep me posted" or newsletter signup form, we collect your email address, the source of your signup (which form or page), and your unsubscribe status/token so we can honor unsubscribe requests.

b. Concierge AI chat. Our Site offers a "concierge" chat widget powered by AI. When you use it, we store the full conversation transcript. Your messages are sent to our AI provider, OpenAI, which generates the assistant's responses and also analyzes the conversation in the background to prepare summaries and estimate artifacts. OpenAI is the only model provider that receives the content of the conversation. From these conversations we may also extract structured signals such as your name, role, company, team size, skill level, goals, pain points, and topics discussed, as well as any working plans or project outlines the assistant generates for you. Retention: Concierge chat data (transcripts, extracted signals, and generated working plans) is retained for 30 days from the conversation, after which it is automatically deleted. The one exception is a follow-up contact record you consent to, described next, which is kept as a business record rather than deleted at 30 days.

b2. Concierge estimate and follow-up. The concierge can give you an estimated starting range for working with Nico. If you then choose to move forward, the concierge will first ask for your consent, and only after you agree will it collect the contact and business details you provide: your name, work email, company, role, team size, the specific issue or workflow you want help with, the tools you currently use, and, only if you volunteer them, rough budget and timeline. With your consent, we store these as a business contact record in our CRM so Nico can follow up with you, and Nico is notified by email that you would like to move forward. To help Nico prepare, we classify the type of engagement by sending de-identified business details to OpenAI, such as your role, company, team size, the tools you use, and the issue or goals you described. We never send your name or email address for this classification. Retention: a contact record you consent to, together with the details from your conversation that we attach to it (including your goals and pain points), is kept as a business record until you ask us to delete it (see "Your Rights" below); it is not subject to the automatic 30-day deletion that applies to ordinary concierge chat data. If you do not consent, none of this contact record is created.

c. Discovery sessions. We offer a separate "discovery" flow. We collect the full transcript of that flow. If - and only if - you explicitly opt in to receive an emailed summary, we additionally collect your contact email, name, company name, and company domain, and we look up company information about that domain using a third-party enrichment provider, Anysite.io. If you do not opt in to an emailed summary, this contact and enrichment data is not collected. Retention: Discovery session data is retained for the same 30-day window as concierge chat data, after which it is automatically deleted, unless you ask us to delete it sooner (see "Your Rights" below).

d. Assessment inputs. Our ROI assessment tool (at /assessment) asks you to provide certain inputs so we can compute an estimate for you. We treat this as assessment inputs you provide for the purpose of generating your estimate. The role and duties text you enter is sent to OpenAI to classify the role and compute the estimate. Assessment results are stored until you ask us to delete them (see "Your Rights" below). If you provide the optional email so Nico can follow up, that adds you to our contact list and Nico is notified.

d2. Key Person Log handoff draft. Our Key Person Log tool (at /key-person-log) keeps your log entries on your own device by default; we do not store them and there is no account. If you choose to use the optional "Draft the handoff note" action on an entry, the text of that entry, its follow-up note, and its urgency rating are sent to OpenAI to generate a draft handoff note and a list of open questions. We do not store the entry, the draft, or the questions on any server; the draft is written back to your device alongside the rest of your log. We keep a content-free technical log of these requests (outcome, timing, and token counts, never the entry or draft text) to operate and monitor the feature.

e. IP address (transient). We use your IP address only to apply rate limiting and abuse protection on our forms and chat features, and transiently to resolve a country code for analytics. The IP address itself is not stored in our database and is not used for tracking.

f. Subscriber email retention. Unlike chat and discovery data, your newsletter subscriber email address is retained until you unsubscribe (via the link in any email we send you), at which point it is marked unsubscribed and/or removed per our unsubscribe process.

g. Contact form. If you use the contact form on our homepage, we collect your name, email, company, what you are looking for, your message, and a phone number if you provide one. These become a business contact record in our CRM (hosted on Supabase), and we are notified by email (via Resend) so Nico can respond. The record is kept until you ask us to delete it (see "Your Rights" below).

2. Sub-processors and Third Parties We Use

We rely on the following service providers to operate the Site. Each only receives the data necessary for its function:

• OpenAI - our only AI model provider. It receives the content of your concierge chat messages to generate the assistant's responses; analyzes those same conversations in the background to prepare summaries and estimate artifacts; receives the role and duties text you enter in the assessment tool to classify the role and compute your estimate; only with your consent, receives de-identified business details from a concierge estimate follow-up (such as your role, company, team size, the tools you use, and the issue or goals you described, but never your name or email) to classify the type of engagement so Nico can prepare; and, only when you use the optional handoff draft action in the Key Person Log, receives the text of that entry, its follow-up note, and its urgency rating to generate the draft.
• Anysite.io - receives a company domain (only when you opt in to an emailed discovery summary) to return company enrichment data.
• Plausible Analytics - receives cookieless, aggregate page-visit data (never your name, email, or any stored identifier).
• Resend - sends transactional and newsletter emails on our behalf.
• Vercel - hosts the Site.
• Supabase - hosts our database, where subscriber, chat, discovery, assessment, and contact record data is stored.

We do not sell your personal information to any third party, and we do not share it for third-party advertising purposes.

3. Your Rights

We do not currently operate a formal self-service data request portal. If you would like to access the personal data we hold about you, request deletion of your data (including before the automatic 30-day window elapses), or correct inaccurate information, please email us and we will respond and act on verified requests in a reasonable timeframe: hello@discoveraiwithnico.com

4. Data Security

We use industry-standard infrastructure (Vercel and Supabase) with access controls appropriate to a small business. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Children's Privacy

The Site is not directed at children under 16, and we do not knowingly collect personal information from children.

6. Changes to This Policy

We may update this Privacy Policy as our Site and practices evolve. We will update the "Effective Date" above when we do. Material changes affecting how we handle previously collected data will be communicated via the Site or, where applicable, by email.

7. Contact Us

Questions about this Privacy Policy or requests regarding your data can be sent to hello@discoveraiwithnico.com