Privacy Policy — Content.is / AI Lead Inbox

1. Who we are (data controller)

The controller of your personal data is UAB „IT Life“ (legal entity code 302447647), registered at Jonažolių g. 15-106, Vilnius, Lithuania. „Content.is“, „AI Lead Inbox“ and „LeadInbox“ are brands and a product operated by UAB IT Life. Privacy contact: admin@content.is.

2. What personal data we collect

Enquiry data you provide: your email address; and if you submit an enquiry — your name, phone number, business name, the description of your request, and the messages you exchange with the AI assistant. Usage/analytics data (only with your consent): information about how you use the site (pages, events, approximate location, device/browser) via analytics cookies. Please do not enter sensitive (special-category) personal data into the chat.

3. Purposes and legal bases

We process your data for the following purposes and legal bases:

• Respond to your enquiry and take steps at your request before a contract — Art. 6(1)(b) GDPR.
• Operate, secure and maintain the service — Art. 6(1)(f), our legitimate interest.
• Analytics / measuring the site and campaigns — Art. 6(1)(a), your consent.
• Marketing communications, only if and when we run them — Art. 6(1)(a), your consent.

4. Cookies and analytics

Strictly necessary cookies run the site. Analytics cookies (Google Analytics 4) load only after you accept them. You can Accept or Reject analytics; if you reject, analytics are not activated and no analytics requests are sent. You can change your choice any time via „Cookie settings“ in the footer.

5. The AI assistant

The intake assistant is powered by Anthropic („Claude“), acting as our data processor. The messages you type are sent to Anthropic's commercial API to generate replies. By default, Anthropic does not use inputs or outputs submitted through its commercial API to train its models. The AI helps ask follow-up questions and structure or summarize your request; it does not make solely-automated decisions producing legal or similarly significant effects about you (Art. 22 GDPR).

6. Recipients and international transfers

We share data only with processors that run the service:

• Main storage: your enquiry data is stored on our own server located in Lithuania (EU).
• Brevo (France): email delivery, processed in the EU.
• Google (Google Analytics): analytics; Google may process data in the United States, under the EU-US Data Privacy Framework and/or EU Standard Contractual Clauses.
• Anthropic (United States): AI replies, under Anthropic's data processing terms and EU Standard Contractual Clauses.

We do not sell your data.

7. Retention

We keep data only for the periods below, enforced by an automatic cleanup:

• Incomplete demo chat / email-only capture: 30 days.
• Submitted demo or sales enquiry: 12 months from last contact.
• Active client service data: for the duration of the service and 12 months after it ends.
• Invoices and payment records: kept separately as required by accounting and tax law.

8. Your rights (GDPR)

You have the right to access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time (without affecting prior processing). To exercise your rights, contact admin@content.is. You may complain to a supervisory authority — in Lithuania: Valstybinė duomenų apsaugos inspekcija (VDAI); in Iceland: Persónuvernd.

9. Changes

We may update this policy; the effective date above shows the current version.