Privacy Policy

Last updated:

Important Notice: This is a free, non-commercial portfolio project created for job application purposes. The application is provided as-is for demonstration and evaluation. By using this application, you acknowledge that you are solely responsible for any data you upload and that the service is provided without warranties.

1. Introduction

This Privacy Policy explains how we collect, use, and protect your personal data when you use the Agentic Forecasting Platform web application. This application is a free, non-commercial portfolio project created to demonstrate machine learning and data science capabilities for job application purposes.

Purpose of This Application: This website is a portfolio project created for job application purposes. It is hosted on Vercel's free hosting service and is publicly accessible for evaluation by potential employers. The application is provided free of charge to demonstrate technical skills and is not intended for commercial use.

2. Data Controller

This is a free, non-commercial portfolio project. The data controller responsible for processing your personal data can be contacted via email for GDPR-related inquiries only.

Contact for GDPR Inquiries:
Email: msa.nabid.cse@gmail.com
Please note: This email is for GDPR-related inquiries only. This is a portfolio project and not a commercial service. Response time: Within 30 days as required by GDPR.

3. Data We Collect and Process

When you use this application, the following data is processed:

Session Identifiers: A unique session ID (UUID) is generated and stored in your browser's session cookie to maintain your session state. This is essential for the application to function.
IP Addresses: Your IP address is automatically collected for security and abuse prevention purposes. IP addresses are used temporarily for rate limiting and are not stored permanently.
Uploaded Files: If you upload CSV files, these are temporarily stored on the server for processing. Files are processed automatically and deleted immediately after processing.
Session Data: Data and machine learning models generated during your session are temporarily stored in session-specific files on the server. This includes uploaded data, trained models, and forecast results.
Usage Statistics: Aggregate usage statistics (function invocations, duration) are tracked in-memory for monitoring Vercel free tier limits. This data does not contain personal information and resets on server restart.

3.1. Responsibility for Uploaded Data

Critical: You are solely responsible for any data you upload to this application.

Data Ownership: You retain full ownership and responsibility for the content of any files you upload
Legal Compliance: You must ensure you have the legal right to upload and process the data (e.g., you own it, have permission, or it's public data)
Data Protection: You are responsible for ensuring the data you upload does not contain personal information of third parties without proper authorization or legal basis
No Data Ownership by Us: We do not claim ownership of, access, view, or analyze the content of your uploaded files beyond what is necessary for automatic processing
Temporary Processing: Your uploaded data is processed automatically by the application and deleted after processing
No Permanent Storage: We do not permanently store, backup, or archive your uploaded files or session data
No Data Sharing: We do not share, sell, or disclose your uploaded data to third parties

By uploading data, you confirm that:

You have the legal right to upload and process the data
The data does not violate any laws, regulations, or third-party rights
You understand the data will be processed automatically and deleted after use
You accept full responsibility for the content of uploaded files
You will not upload sensitive personal data (e.g., health records, financial information) without proper legal basis

4. How We Process Your Data

All data processing happens automatically when you interact with the application:

Data processing occurs on-demand when you use application features (load data, train models, generate forecasts)
All computation happens on the hosting server (Vercel) during your active session
We do not access, view, or analyze your uploaded data or generated models manually
Session data is automatically isolated per user using unique session IDs
IP addresses are used only for abuse prevention and rate limiting, stored temporarily in memory

4.1. Data Access and Visibility

Technical Reality: For full transparency, here's who can technically access your data:

Vercel (Hosting Provider - Data Processor):
- Vercel can see request metadata (URLs, IP addresses, request sizes, timestamps) for infrastructure purposes
- Vercel does NOT actively access, view, or monitor the content of uploaded files
- Vercel may access file contents only in exceptional cases (security incidents, abuse reports, legal requirements)
- Vercel acts as a data processor and processes data according to their Data Processing Agreement
- Vercel's privacy policy: https://vercel.com/legal/privacy-policy
Application Owner (Data Controller):
- Technically, server access could allow viewing session files stored on disk
- However, we do NOT actively access, view, monitor, or analyze your uploaded data
- We do not have logging or monitoring systems that capture file contents
- Data is processed automatically by the application code without human intervention
- We treat all uploaded data as confidential and do not access it unless legally required
- IP addresses are used only for abuse prevention and are not stored permanently
Automatic Processing:
- Your data is processed automatically by the application code
- No human reviews or analyzes your data
- Data is processed in isolated session files and automatically deleted

5. Purpose and Legal Basis for Data Processing

Your data is processed for the following purposes:

To provide the forecasting functionality of the application
To maintain your session state and isolate your data from other users
To process uploaded CSV files for demand forecasting
To ensure the security and proper functioning of the application (abuse prevention, rate limiting)
To monitor usage against Vercel free tier limits (aggregate statistics only, no personal data)

Legal Basis (GDPR Article 6):

Consent (Article 6(1)(a) GDPR): By using this application, you consent to the processing of your data for the purposes described in this policy. You can withdraw your consent at any time by closing your browser session and not using the application.
Legitimate Interest (Article 6(1)(f) GDPR): Processing of technical data (session IDs, IP addresses for security) is necessary for the performance of the service and our legitimate interest in providing a secure, functional application and preventing abuse.
Contract Performance (Article 6(1)(b) GDPR): Processing is necessary to provide the requested service (demand forecasting functionality).

CRITICAL DISCLAIMER: FORECAST ACCURACY AND LIABILITY

This is a FREE, NON-COMMERCIAL PORTFOLIO PROJECT.

NO WARRANTIES OR GUARANTEES: This application is provided "AS IS" without any warranties, express or implied. We make NO representations or warranties regarding:

The accuracy, reliability, or correctness of any forecasts generated
The suitability of forecasts for any particular purpose
The completeness or timeliness of forecast results
The fitness of the application for any business, commercial, or critical use

NOT FOR COMMERCIAL USE: This application is NOT intended for, and must NOT be used for:

Business decisions, financial planning, or investment decisions
Supply chain management, inventory planning, or procurement decisions
Any critical decisions where forecast accuracy is required
Any commercial or revenue-generating activities

USE AT YOUR OWN RISK: By using this application, you acknowledge and agree that:

Forecasts are generated automatically using machine learning models and may contain errors
Forecast accuracy is NOT guaranteed and may vary significantly
You use the forecasts and application entirely at your own risk
You are solely responsible for any decisions made based on the forecasts
We are NOT liable for any losses, damages, or consequences resulting from use of forecasts

LIMITATION OF LIABILITY: To the maximum extent permitted by law, we (the data controller, application owner, and any associated parties) SHALL NOT BE LIABLE for any direct, indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or business opportunities, arising from or related to:

Use or inability to use this application
Inaccurate, incorrect, or misleading forecasts
Decisions made based on forecast results
Any errors, bugs, or technical issues in the application
Loss or corruption of uploaded data

PORTFOLIO PROJECT DISCLAIMER: This application is a personal portfolio project created by a job candidate to demonstrate technical skills. It is NOT a commercial product, business service, or professional forecasting tool. The application is provided free of charge for demonstration and evaluation purposes only. No professional services are being offered, and no commercial relationship is established by using this application.

6. Data Storage and Retention

All data is stored temporarily and automatically deleted:

Session Files: Stored on the server for the duration of your active session. Session files may persist for up to 7 days for technical reasons, after which they are automatically purged.
Uploaded CSV Files: Processed immediately and deleted after processing (typically within seconds).
IP Addresses: Stored temporarily in memory for abuse prevention (rate limiting). IP addresses are not written to disk and are cleared when the server restarts (typically daily on Vercel serverless functions).
Usage Statistics: Aggregate statistics (invocation counts, duration) are stored in-memory only and reset on server restart. No personal data is included.
No Permanent Storage: No data is stored permanently or used for any purpose beyond providing the application functionality.

7. Data Processors and Third-Party Services

Vercel (Hosting Provider - Data Processor):

This application uses Vercel's free hosting service (hobby/free tier) for portfolio purposes
Vercel is GDPR-compliant and processes data on our behalf as a data processor
Vercel automatically collects IP addresses, request logs, and technical metadata for security, performance, and infrastructure purposes
We do not have direct access to or control over all technical data collected by Vercel
Vercel's data processing is governed by their Data Processing Agreement (DPA) and Privacy Policy
For details on Vercel's data processing practices, please refer to: Vercel's Privacy Policy
Note: We are using Vercel's free tier service. Vercel's Terms of Service and Privacy Policy cover data processing for free tier users.

No Other Third-Party Services: This application does not use analytics services, advertising networks, or other third-party tracking services. The only third-party service is Vercel (hosting provider).

8. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right of Access (Article 15): You can request information about what personal data we hold about you.
Right to Rectification (Article 16): You can request correction of inaccurate data.
Right to Erasure (Article 17): You can request deletion of your data ("right to be forgotten").
Right to Restrict Processing (Article 18): You can request limitation of data processing.
Right to Data Portability (Article 20): You can request your data in a structured, commonly used format.
Right to Object (Article 21): You can object to processing of your data based on legitimate interests.
Right to Withdraw Consent (Article 7(3)): You can withdraw your consent at any time by closing your browser session.
Right to Lodge a Complaint (Article 77): You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise these rights, please contact us using the email address provided in Section 2. We will respond to your request within one month as required by GDPR.

Note: Since data is automatically deleted after sessions end, most data will no longer be available after 7 days. However, we will assist you with any requests to the extent possible.

9. Cookies

This application uses essential session cookies only to maintain your session state. These cookies are strictly necessary for the application to function and are automatically deleted when you close your browser.

Session Cookie: Stores a unique session ID (UUID) to maintain your session state
Type: Essential/Functional cookie (required for application functionality)
Duration: Session-only (deleted when browser is closed)
Purpose: To isolate your data from other users and maintain session state
Third-Party Cookies: None

We do not use: Tracking cookies, analytics cookies, advertising cookies, or any third-party cookies. The only cookie used is essential for the application's core functionality.

Legal Basis: Essential cookies are necessary for the performance of the service (Article 6(1)(f) GDPR - legitimate interest) and do not require explicit consent under German law (TMG §15(3)). However, by using this application, you consent to the use of this essential cookie.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

Session data is isolated per user using unique session IDs
Data is stored in secure server-side files, not accessible via web URLs
Automatic deletion of data after processing
HTTPS encryption for all data transmission (provided by Vercel)
Rate limiting and abuse prevention measures
No logging of sensitive data (file contents are not logged)

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. International Data Transfers

This application is hosted on Vercel, which may process data in various locations worldwide. Vercel is GDPR-compliant and has appropriate safeguards in place for international data transfers. For more information, please refer to Vercel's Privacy Policy and Data Processing Agreement.

12. Children's Privacy

This application is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates when changes were made. We encourage you to review this policy periodically. Continued use of the application after changes constitutes acceptance of the updated policy.

14. Contact Information

Important: This is a free, non-commercial portfolio project. For GDPR-related inquiries only, you may contact:

Email (GDPR inquiries only): msa.nabid.cse@gmail.com

Response Time: We will respond to GDPR-related inquiries within 30 days as required by GDPR. Please note that this is a portfolio project and not a commercial service. For general questions about the application, please refer to the documentation.

Scope of Contact: This contact information is provided solely to comply with GDPR requirements for data controller identification. Given that this is a free portfolio project with automatic data deletion and no commercial purpose, most GDPR requests will be limited in scope as data is automatically deleted after sessions end.

15. Supervisory Authority

If you are located in the European Economic Area (EEA) and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. However, please note that this is a free portfolio project with automatic data deletion, and most data is automatically removed within 7 days.

BfDI (Germany):
Website: https://www.bfdi.bund.de

Note: For a free, non-commercial portfolio project with automatic data deletion, the scope of any potential GDPR complaint would be limited, as data is not permanently stored and the service has no commercial purpose.

Impressum | Back to Application