Privacy

Short, and specific to what this site actually does. If anything here is unclear, ask us and we will answer plainly.

Who is responsible

saltedcaramel.ai is a trading name of Moncoco, business registration 108‑34‑07302. For anything on this page, write to [email protected].

Our servers are in the Republic of Korea, so if you contact us from elsewhere your enquiry is transferred there. It is used only to answer you.

The contact form

The form asks for your name, email address, company, an optional phone number, a preferred time and timezone for a call, and whatever you write in the message.

None of it is stored in a database. This site does not have one. The form posts to this server, which composes an email and sends it to us; that email is then all that exists. We use it to reply to you and to prepare for the call, and for nothing else.

Lawful basis, where that concept applies to you: taking steps at your request before entering a contract, and our legitimate interest in answering people who contact us.
Retention: enquiry email is kept for two years and then deleted, unless it becomes part of a client engagement, in which case it is kept for as long as our business records require.
We never sell it, never share it for marketing, and never add you to a mailing list. There is no mailing list.

Your address, and the logs

Two places record the address you connect from:

Rate limiting. To stop the form being flooded, the server holds your address in memory for fifteen minutes to count submissions. It is never written to disk and disappears when the window passes or the service restarts.
Access logs. Our web server keeps ordinary access logs, including addresses, for 30 days, to keep the site running and to investigate abuse.

The enquiry itself and the sender's address are deliberately kept out of the application logs.

Analytics

We use Google Analytics to see which parts of this site get read. Two things about how we have set it up:

Nothing loads until you agree. Google's script is not requested at all until you accept the banner. If you decline, or simply ignore it, your browser makes no request to Google and no cookie is set. That is stricter than the usual arrangement, where the tag loads anyway and merely refrains from storing anything.
No personal data is sent. Names, email addresses, phone numbers, company names and message text never leave the page. Analytics records which sections were read and whether an enquiry was sent, but not who sent it.

Your choice is stored in your own browser under saltedcaramel.consent. Clearing your site data for this domain resets it and you will be asked again. Google's own handling is described in their privacy policy.

Others involved

Cloudflare sits in front of this site and sees the address of every request, as any network provider would.
Brevo carries the email your enquiry becomes.
Google receives analytics events, but only after you have agreed.

There is nobody else. No advertising networks, no tracking pixels, no embedded third-party widgets, and no fonts loaded from anyone else's server. The typefaces on this site are served from here for exactly that reason.

What you can ask for

Wherever you are, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected] and we will do it within 30 days. There is no charge.

Depending on where you live you may also have the right to object to or restrict what we do with your information, to receive it in a portable form, and to complain to a regulator: the Information Commissioner's Office in the United Kingdom, your national authority in the EU, the Information Regulator in South Africa, or the Office of the Australian Information Commissioner in Australia. We would rather you raised it with us first, but you are not obliged to.

Changes

If we change how any of this works, we will change this page. It is short enough to re-read.