When you write to me through a form on this site, I store what you enter (name, email, company if asked, and message), the page language and the page you wrote from. I use it only to reply and follow up on your request.
Privacy
Data controller: Lucas Grilli, Italian VAT 04189661202,lucas@lucasgrilli.com. This page explains what data this site and the plugins and skills I publish collect, why, and how to ask for it to be deleted.
Last updated: October 4, 2026.
Contact forms
I keep this data for up to 24 months after our last exchange, then delete it. If you become a client, billing data is kept for the period required by tax law.
Analytics and cookies
Vercel Analytics counts visits in aggregate, without cookies and without identifying you. The click counter on links and buttons records only which link was used, the referring site, whether the device is mobile or desktop, and whether the visit comes from a bot: no IP address, no cookies.
Google Analytics 4 only runs if you accept it from the banner you see on your first visit. It sets a cookie that recognizes your browser across visits. If you decline, or choose nothing, the site works exactly the same.
Plugins and skills for AI assistants
The plugins and skills I publish for ChatGPT, Claude and other assistants are instructions that run inside the assistant you use. They don't send me your conversations or the data you enter: I never receive them.
Your conversations are governed by the assistant's own policy: for ChatGPT, theOpenAI privacy policy; for Claude, Anthropic's. If you follow a link from a plugin to this site, this page applies.
If one of my plugins ever uses a server of mine, I'll say so here before publishing it, listing what data passes through it and how long it is kept.
Website Search Audit
Website Search Audit is a package of skill instructions for reviewing website SEO and AI-search readiness. It uses the website URL, page text or HTML exports, competitor details and any AI-response logs you choose to supply to produce an audit and recommendations. These inputs can contain business contact information or other personal data present in the pages or exports.
This package has no server operated by me. I do not receive, store, sell or share its audit inputs, conversations or generated reports, so I keep no copies of that audit data. The assistant provider processes the conversation and its tools process requests under their own policies and account settings, including their retention and deletion rules. When web-reading tools request external websites, those sites may receive and log the requests under their own policies.
You choose which URLs and exports to supply and can use page exports instead of live website reading. Remove private information that is unnecessary for the audit. You can stop the audit and manage or delete the conversation through your assistant's available controls. If you visit this website or send a contact-form message, the separate website practices described above apply. For questions about this package, contact lucas@lucasgrilli.com.
Providers
Vercel hosts the site and the analytics; like any server, it processes IP addresses in technical logs. Supabase stores form messages and the click counter. Google runs Analytics, only if you accept it. Some of these providers are based in the United States: transfers rely on the safeguards in their contracts.
Your rights
You can ask me to access, correct or delete your data, to restrict its use, or to receive a copy, by writing tolucas@lucasgrilli.com. I reply within 30 days. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority in your country.
See also