Privacy Policy

This Privacy Policy explains how AsMade handles personal information when you visit useasmade.com, use the Contact form, email the published AsMade address, open public MADE Record Evidence, or open or submit the linked MVP pilot application on Tally.

It does not describe a future AsMade application, participant account or file-upload workflow, or a general participant-material archive because those systems are not currently operating. The site currently publishes a small set of authorised example MADE Records and public or redacted Evidence representations; those examples do not create a general public submission or participant-record archive.

1. Who is responsible

AsMade is operated by:

Official name

IAN KIRS PR BANJA KOVILJAČA

English name

Ian Kirs Sole Proprietor Banja Koviljaca

Registered address

Ive Lole Ribara 64, Banja Koviljača, 15316 Loznica, Serbia

Registration number

68433266

Tax ID / PIB

115550070

Registered activity

7111 — Architectural activities

VAT status

Not registered for VAT

Email

hello@useasmade.com

Website

https://www.archkirs.site

The operator determines why and how personal information is used for the AsMade public site, Contact form, correspondence, and pilot application.

2. Information handled when you visit the site

The AsMade site is hosted by Vercel. When your browser requests a page, asset, or form endpoint, Vercel may process technical information needed to deliver, protect, and diagnose the service, including IP address, approximate location, requested path, date and time, browser, device, operating system, language, network, referrer, performance information, and security events.

AsMade uses Vercel Web Analytics to understand aggregated site traffic. It may process the page URL, referrer, filtered query parameters, approximate geolocation, device type, operating system, browser, event time, and script version. Vercel states that Web Analytics does not use third-party cookies, identifies a visitor through a request-derived hash, and discards the visitor session after 24 hours.

AsMade uses Vercel Speed Insights to understand real-world page performance. It may process route and URL, network speed, browser, device type, operating system, country, Web Vital measurements, attribution information, SDK information, and server-received event time. Vercel states that these data points are not tied to an individual visitor or IP address and cannot be used to reconstruct a browsing session.

When you open a public Evidence preview or PDF linked from a public MADE Record, your browser may request an authorised public or redacted file from Backblaze B2. Backblaze states that its services may automatically collect technical information including device or software information, IP address, and the date and time of requests.

Only separately authorised public or redacted Evidence representations are linked from the current public Records. Private source Evidence is not made public by default.

The Contact endpoint may use the source IP at the infrastructure layer to enforce a rate limit. The AsMade application code does not intentionally write raw IP addresses, contact-form content, email addresses, or names into its own logs.

AsMade does not use these tools for advertising, marketing profiles, custom form events, or tracking information entered into the Contact form or Tally application.

3. Information collected through the Contact form

The Contact form may collect:

• your name, when you choose to provide it;
• your email address;
• one selected topic;
• the message you enter;
• a random request identifier used to reduce duplicate sends;
• limited technical information processed by Vercel and Resend to operate, protect, and deliver the message.

The form does not accept files and is not an approved route for confidential or sensitive project material.

The form submission is processed by a Vercel Function, passed to Resend for email delivery, and delivered to authorised AsMade team Gmail accounts. The function does not create a separate contact-message database.

4. Information collected through the pilot application

The pilot application is hosted by Tally and may collect the landing-page source, kind of work, reason a MADE Record may be needed, possible reviewer, whether AsMade may contact you, and your email address when you select Yes or Maybe.

No work files are uploaded through the current application form.

For application responses, AsMade is the controller and Tally provides the form service as a processor.

5. Information you send by email

If you email hello@useasmade.com, AsMade may process your email address and display name, subject and message content, message headers and delivery information, and information you choose to include in later correspondence.

Incoming project mail is forwarded through Porkbun and stored in authorised Gmail accounts. Outgoing replies may be delivered through Resend.

Do not send work files, confidential materials, or sensitive personal information unless AsMade has first provided a separate approved submission route and notice.

6. Why we use information

We use personal information to deliver and protect the site; deliver authorised public Evidence files; understand aggregated site traffic and page performance; read and respond to contact messages; handle privacy or deletion requests; evaluate voluntary pilot applications; contact applicants who requested or permitted follow-up; prevent abuse; protect rights and systems; and meet applicable legal obligations.

Depending on the request, processing is based on responding to steps you initiate, the operator’s legitimate interest in operating and improving a secure public information site and communication channel, evaluating voluntary applications, or applicable legal obligations.

Contact-form submission does not authorise marketing, newsletter subscription, or unrelated use of your information.

7. Who may receive information

Personal information may be available to Ian Kirs and Daria Kirs where needed for project coordination; Vercel for hosting, endpoint execution, security, aggregated Web Analytics, and Speed Insights; Backblaze for delivery of authorised public or redacted Evidence files; Tally for the pilot application; Porkbun for domain and incoming-email forwarding; Google for Gmail infrastructure; Resend for email delivery and associated delivery records; and professional advisers or public authorities where legally required or reasonably necessary to protect rights and security.

AsMade does not sell contact, application, analytics, or performance information and does not use it for third-party advertising.

8. International processing

Some providers may process information outside Serbia or make it available to authorised subprocessors under their own terms and safeguards. Tally states that form data is encrypted in transit and at rest and stored in Europe. Vercel, Backblaze, Google, Porkbun, and Resend may operate internationally.

9. Retention

Public-site technical, analytics, performance, and Evidence-delivery data

AsMade does not maintain its own separate visitor-profile or analytics database. Vercel Web Analytics discards its visitor session after 24 hours and retains aggregated analytics according to the active service, account plan, provider rules, and AsMade project settings. Vercel Speed Insights retains anonymous performance data according to the active service, account plan, provider rules, and AsMade project settings. Technical hosting and security information is also retained by Vercel under its applicable rules.

AsMade does not maintain a separate visitor log for public Evidence downloads. Backblaze may retain provider-controlled technical, request, security, or service information under its own applicable rules.

Contact messages and ordinary correspondence

Ordinary contact correspondence is normally retained for up to 12 months after the last message in the thread, then deleted unless a documented operational or legal reason requires longer retention.

Spam, tests, duplicate submissions, and clearly erroneous messages are deleted within 30 days.

Privacy or deletion-request correspondence is deleted after the request is completed. AsMade may retain a minimal completion record for 12 months containing only an internal request ID, request date, completion date, and result, without the sender’s name, email address, or message content.

Resend has stated to AsMade that sent-email content and associated logs in the active Free workspace are retained for 30 days and then automatically removed. Resend also stated that an identified email can be erased earlier following a support request, normally processed within 1–2 business days. Provider backup or security records may remain for a limited period under Resend’s own DPA and security commitments.

Pilot applications

Applications that do not become active pilot cases are retained for no more than six months from submission and then manually deleted from Tally, unless a longer period is required by law or needed for an active request or dispute.

If an applicant becomes a selected participant, later project materials and participant information will be governed by a separate participant notice and approved handling process.

10. Your choices and rights

Depending on the applicable law and circumstances, you may ask AsMade to confirm processing, provide access or a copy, correct inaccurate information, delete information, restrict or object to certain processing, stop pilot follow-up, or explain the source, purpose, and recipients of your information.

Use the Contact form and choose Privacy or deletion request, or email hello@useasmade.com. AsMade may need enough information to connect the request to the relevant record but will not ask for unnecessary identity documents.

Where a request concerns a Contact-form email still held by Resend, AsMade may submit an erasure request to Resend support using the minimum identifier needed.

You may also contact the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.

11. Adults only for the current pilot

The current planned pilot is limited to people aged 18 or older. The public site is not designed to collect personal information from children. If you believe a child has submitted personal information, contact hello@useasmade.com.

12. Cookies and similar technologies

AsMade does not intentionally set analytics or advertising cookies on the current site. Vercel Web Analytics is configured without third-party cookies, and Vercel Speed Insights is designed not to identify individual visitors or reconstruct browsing sessions.

The site links to Tally as an external service, where Tally’s own cookies, notice, and settings apply.

No separate cookie-consent banner is currently planned solely for Vercel Web Analytics and Speed Insights. This position will be reviewed if the implementation, provider behaviour, public-site features, or applicable requirements change.

13. Security

The Contact form accepts only short text fields, validates submissions on the server, uses a hidden anti-spam field, limits request size, uses a random duplicate-protection identifier, and is intended to be protected by a Vercel rate-limit rule. The Resend API credential is stored only as a Vercel environment secret and is not included in browser code.

No online system is completely secure. Do not use the Contact form, public application, or ordinary email to send confidential or sensitive material.

14. Third-party links and services

The site links to Tally, professional profiles, and other third-party services. Public MADE Records may also load authorised public or redacted Evidence files from Backblaze B2. Those providers have their own privacy notices, terms, and service settings.

15. Changes and contact

This Policy may change when the public flow, service providers, analytics or performance tools, public Evidence delivery, or pilot process changes. The effective date and last-updated date are shown at the top.

Privacy questions and requests: use the Contact page or email hello@useasmade.com.