Privacy Policy
This policy explains what data I collect, how it's used, and your rights. I take privacy seriously — I build tools, not surveillance systems.
01 Who this applies to
This policy applies to clients of Diya Hussein — Custom Automation & AI Tools ("I", "me", "the Provider") and visitors to this website. I am an independent developer based in Timișoara, Romania.
02 Data I collect
Website visitors: this site does not use cookies, analytics scripts, trackers, or any third-party services. I do not collect IP addresses, browsing behaviour, or any personal data from visitors.
Clients and prospects: when you contact me or engage my services, I collect only what you provide:
- Name, email address, and any contact details you share
- Project requirements, specifications, and communication history
- Credentials and access tokens needed to build or operate your system (API keys, account details, channel IDs)
- Payment information — processed through Revolut or bank transfer; I do not store card numbers
I do not collect or process sensitive personal data (health, biometrics, political opinions, etc.) as part of my services.
03 How I use your data
Client data is used exclusively to:
- Design, build, and deliver the System you commissioned
- Communicate about your project, provide support, and send invoices
- Maintain the System if you have an active care plan or retainer
I do not sell, rent, or share your data with third parties. I do not use client data to train AI models.
04 Data I do not access
The Systems I build run on your machine. Unless you actively share credentials with me for development, testing, or maintenance, I have no access to your accounts, messages, content, analytics, or any data that passes through the System once it's delivered and running.
05 Data storage and retention
- Project files, correspondence, and credentials are stored on my local, encrypted machine and backed up to encrypted cloud storage (Google Drive with 2FA).
- I retain project data indefinitely for reference and potential future work, unless you request deletion.
- Payment records are retained as required by Romanian tax law (typically 10 years).
06 Your rights (GDPR)
As a data subject under the GDPR, you have the right to:
- Access — request a copy of the personal data I hold about you
- Rectification — correct any inaccurate or incomplete data
- Erasure — request deletion of your personal data (subject to legal retention obligations)
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing of your data
To exercise any of these rights, email me at diya.minamoto@gmail.com. I will respond within 30 days.
07 Third-party services
I use the following third-party services in my business:
- Revolut — payment processing (see Revolut's privacy policy)
- Google Workspace — email and file storage (see Google's privacy policy)
- Telegram / Discord / Instagram — communication platforms you may choose to contact me through
These services have their own privacy policies. I am not responsible for their data practices.
08 International transfers
Your data is stored and processed in Romania (EU). If you are outside the EU, your data may be transferred to the EU for processing. The EU maintains adequacy decisions and standard contractual clauses to ensure appropriate safeguards.
09 Children's data
My services are not directed at individuals under 18. I do not knowingly collect data from minors.
10 Changes to this policy
I may update this policy. Changes are effective when posted. The "last updated" date above indicates the current version.