// Data and trust
Your visitors' data, in plain English
What the website assistant keeps, where, for how long, and what happens if you stop using it. If anything here is unclear, email mertkeskin@mksparkinteractive.com.
Last updated: 27 October 2026
Who you are dealing with
MK Spark Interactive is run by Ali Mert Keskin, based in Türkiye. I set up and look after every assistant myself, and you email me directly. I reply within 2 working days, and usually the same or the next day.
For the conversations on your website, you are the data controller and we act as your data processor: we only use your visitors' information to run the assistant for you. Our data processing agreement is published, and we countersign a copy if you email us.
What the assistant keeps, and for how long
We don't keep full chat logs. A visitor's message is sent to our server and to the AI service to write the reply, and then it is gone, apart from the items below.
| What | Why | How long |
|---|---|---|
| Enquiries: name, phone or email, a one-line summary and the conversation that led to it | Emailed to you so your team can reply | Deleted from our database after 30 days. The email in your inbox is yours to keep. |
| Questions it couldn't answer (the question only) | Shown in your panel so you can add the answer | Deleted after 90 days |
| Usage counters with a one-way scrambled version of the visitor's IP address | Stops misuse, and gives you the message counts in your reports | Deleted after 62 days |
| Payment card numbers | Never needed | Removed automatically before anything is sent, saved or emailed |
Your own information (your website details, notes and closures you add in the panel) stays for as long as you use the service.
Where it is processed
- AI replies: Google's Gemini API, on the paid service. Under Google's terms, prompts and replies on the paid service are not used to improve Google's products; Google keeps them for a limited time only to detect misuse.
- Database and server code: Supabase, with servers in South Korea. The UK has adequacy regulations for the Republic of Korea, which allow UK personal data to be transferred there.
- The chat button script: served from our website, hosted by Vercel.
- Emails to you: sent through Google's email service.
Cookies
The assistant sets no cookies and uses no tracking or advertising tools. When a visitor sends a message, it keeps a random chat number in the browser's session storage so the conversation hangs together; it is cleared when they close the tab.
We think this counts as "strictly necessary" for a chat the visitor has started, so it normally needs no extra consent. Your own privacy adviser has the final say for your website.
Text for your privacy policy
You can copy this into your own privacy policy, and change it as you need:
Our website has a chat assistant run for us by MK Spark Interactive. If you use it, your messages are processed to answer you, using Google's Gemini AI service. If you give your name and contact details, they are sent to us so we can get back to you and are deleted from the assistant's system after 30 days. Questions the assistant can't answer are kept for up to 90 days so we can improve its answers. The chat sets no cookies. Please don't share medical details, payment card details or passwords in the chat.
What it will not do
- Invent prices, times or policies. It answers only from information you have approved, and when it doesn't know, it gives your phone number, email or booking page and offers to take the visitor's details.
- Give medical, legal or financial advice. Possible emergencies are sent to 999, NHS 111 or your own emergency line straight away.
- Promote prescription-only medicines on an aesthetics clinic's website, promise treatment results, or offer treatments to under-18s.
- Pretend to be a person. If asked, it says it is an AI assistant.
If you leave, or if we stop
- Removing the assistant is one line of code. Nothing else on your website changes.
- Ask by email and we send you everything we hold for you (enquiries, notes, unanswered questions) within 5 working days, then delete it within 30 days.
- If we ever close the service, you get at least 30 days' notice and a copy of your data.
- If the assistant has a problem, your website keeps working: the chat button hides itself or asks the visitor to try again, and if the AI service is busy it gives your own contact details instead.
Your visitors' rights
If a visitor asks you to see or delete their data, forward the request to mertkeskin@mksparkinteractive.com and we will deal with it within 5 working days. Our own website's privacy policy is here.