Privacy Policy

Last updated September 21, 2026

ndungu.dev is a personal and consulting site published by David Ndungu. The website is served as static pages and includes an optional AI chat backed by a server on AWS. There are no user accounts.

AI chat

When you send a chat message, your message and recent conversation history are sent to the chat server on AWS, then to OpenRouter and its selected model provider to generate a response. The assistant helps you explore whether David’s consulting services fit your needs. It is AI and may make mistakes. Do not submit secrets, private client details, or sensitive personal information.

The application saves messages and AI replies in an encrypted database on AWS so David can review conversations and you can resume them. Saved chats remain until deleted; there is no automatic expiry. Your browser stores private recovery keys and short chat titles in local storage. Anyone using the same browser profile can reopen those chats. Clearing browser data removes your access keys but does not delete the server transcripts. Chats do not automatically follow you to another browser or device. Use Delete chat to remove the saved conversation, or contact David for a deletion request. Disaster-recovery backups may retain deleted data for up to 35 days. Messages are not written to application logs. The server uses IP addresses temporarily for request limits. AWS, OpenRouter, and model providers process request data under their own policies; their retention may differ from the application’s. See OpenRouter’s privacy policy.

David can read saved transcripts through a protected review page. You can book a discovery call inside chat after reviewing and explicitly confirming the appointment. The chat does not send separate lead notifications. If your browser offers voice input and you activate it, speech may be processed by your browser’s speech recognition provider; the resulting text is only sent to the chat when you submit it.

Booking inside chat

When you book inside chat, your name, email, selected time, time zone and booking status are saved with the conversation. These structured booking fields are not sent to the AI model. After you review and confirm, the server sends them to Cal.com to create the appointment and send invitations. Cal.com and the connected calendar and meeting providers process booking data under their own policies. Deleting a chat does not cancel the appointment or delete Cal.com’s records; use your invitation email to cancel or reschedule. See Cal.com’s privacy policy.

Analytics

The site loads Google Analytics (gtag.js) to measure page views and general traffic patterns. Google may set cookies and collect standard analytics data such as approximate location, device type, and referring page. See Google's Privacy Policy for details on how Google processes this data.

Embedded third-party components

The homepage hero loads a 3D scene from Spline (splinetool/spline-viewer), served from Spline's own domains. Loading that component means your browser makes a request directly to Spline's infrastructure, subject to Spline's privacy policy. Google Fonts are loaded from fonts.googleapis.com and fonts.gstatic.com to render the site's typeface.

What happens when you contact me

Booking inside chat sends your confirmed details to Cal.com as described above. Other booking links open Cal.com directly; email and phone links open your own mail or phone app. Any information you send me directly (by email, phone, or the booking form) is used only to respond to you and, if you become a client, to deliver the work. I don't sell or share it with third parties for marketing.

No advertising or tracking pixels beyond analytics

This site does not run ad networks, retargeting pixels, or third-party trackers beyond the Google Analytics tag described above.

Questions

For any privacy question or a request to see or delete data I hold about you, email [email protected].