Website privacy notice

Effective 2 November 2026 · Version website-2026-11-02-v3

This notice covers the HighTalk company website, its product demonstrations, scenario calculator and contact and waitlist forms. The separate communication experience at `/chat` has its own information and app policy archive.

Who is responsible

HighTalk is operated by Oleksandr Mudrytskyi, the controller of the website enquiry and waitlist information described here. Privacy contact: admin@hightalk.me. Correspondence address: Nawrot 56/38, Łódź, 91-001, Poland.

What the public experience does

The site explains our work and lets you explore a demonstration of HighTalk Orbit and HighTalk Lyra. Demonstration companies, people, results and analytics are synthetic. A simulated step does not publish content, call a person, contact a customer or connect to a customer's production account. HighTalk Nott is presented as a planned managed service and is not activated by the demonstration.

The scenario calculator is an estimate, not a quote or a promise of financial results. Its values stay in your browser unless you deliberately include them in an enquiry. There is no public checkout or payment collection on this website.

Information and purposes

For a contact request we collect your email address and request, and any optional name or company information you provide. We use it to assess and handle the request. Where an individual asks us to take steps towards a contract, the basis is Article 6(1)(b) GDPR. For a business enquiry made by a company's representative, the basis is our legitimate interest in handling the enquiry under Article 6(1)(f).

For the waitlist we collect your email address, selected product interest and any optional details you choose to provide. The basis is your consent to record and hold that interest under Article 6(1)(a). You can withdraw it by contacting us. Joining does not subscribe you to marketing, authorise calls or create a paid order.

Providing information is voluntary, but we need the required fields to record your request. Please do not submit passwords, API keys, payment details, sensitive personal data or confidential customer records. We also keep the form purpose, language, applicable notice/consent version and submission time so we can handle the record and demonstrate your choices. Necessary security processing protects the service and prevents abuse, based on our legitimate interests.

Storage and access

Contact and waitlist submissions are saved to a HighTalk-controlled database and reviewed through a private, access-controlled owner interface. Internal notes relate to handling the request. Submitting a form does not automatically send an email, a Telegram notification, a sales call or your text to an AI model provider. The form does not automatically write to a customer's CRM or publish on social media.

The website is delivered through Cloudflare infrastructure. Cloudflare processes necessary traffic and security information under its service arrangements; see its privacy policy and customer DPA. Authorised people and providers receive only the information needed to operate the service, handle your request or meet a legal obligation. We do not sell your enquiry data or publish it as a case study without a separate basis.

Some infrastructure processing may take place outside the EEA. Where GDPR transfer rules apply, we use the applicable mechanism, such as an adequacy decision or standard contractual clauses and any necessary additional safeguards. You can request information about the arrangements relevant to your data.

Retention

An enquiry that does not become an engagement is deleted or irreversibly anonymised 90 days after the last substantive interaction. Waitlist information is deleted or irreversibly anonymised 180 days after submission unless you separately renew your request. Related internal notes follow the same lifecycle. If an enquiry becomes a client engagement, the necessary information moves to the engagement's contractual and retention arrangements.

Limited information may be retained when a legal obligation or the establishment, exercise or defence of an actual legal claim requires it. Access is restricted and the reason and period are recorded. Deletion requests are also applied to relevant copies and to the documented backup lifecycle; restoring a backup does not authorise renewed use of deleted records. Hosting providers have their own necessary technical-log arrangements.

Cookies and AI

The company website does not install advertising pixels, session replay or nonessential analytics tracking. Necessary hosting, security and private-session mechanisms may process technical information. This statement does not describe the separate legacy `/chat` application.

The public demonstration does not make decisions about you with legal or similarly significant effects. Form submission does not train an AI model. Any later AI-assisted client work requires its own agreed purpose and data-processing arrangements.

Your rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction, portability and object to processing based on legitimate interests. You may withdraw waitlist consent at any time; this does not affect earlier lawful processing. Contact admin@hightalk.me. We may request proportionate information to verify a request and normally respond within one month, with an extension only where the law permits and with notice to you.

You may lodge a complaint with the President of Poland's Personal Data Protection Office, UODO, or another competent supervisory authority. We update this notice when the website's processing changes.