Privacy notice
This page covers the Kopilotti Sales presentation and demonstration site (app.kopilotti.online).
What data is collected
The site uses Vercel Web Analytics to track visitor numbers and page views. The service does not use cookies and does not build a persistent profile linked to a specific individual. Vercel Web Analytics may process, among other things, the page URL, the referring site, filtered URL query parameters, a coarse geographic location (for example, country), and browser, operating-system and device information. A visitor identifier is computed per request and is not retained for more than 24 hours.
The price-negotiation demo (vehicle.html), on the other hand, is a functional purchase journey, not just an illustration, and it processes real, personally identifiable data when it is used:
- an email address and the verification code sent to it, to confirm identity before the price negotiation begins;
- a device identifier in a browser cookie, used to recognize the same negotiation again from the same device;
- the offer made in the conversation and the short, customer-written rationale attached to it;
- a technical security signal (IP address as a hash, not in plain text) to detect abuse.
An event history is also kept of the negotiation's steps and the responses given to them (e.g. offers made and how they were handled), so the process can be verified afterward if needed — for example in a customer-service or dispute situation.
The email address and IP address are always stored as an encrypted hash, never as plain text, on the server.
AI in the conversation — who ultimately decides the price
The price-negotiation conversation is conducted by an AI-based assistant (Anthropic Claude). The assistant talks with the customer and extracts a structured offer proposal from the conversation (amount, any condition, a short rationale). The AI itself does not accept, reject or counter-offer a price. Every offer is checked in a separate backend system that follows rules the dealer has defined in advance, and that system makes the final decision (acceptance, counter-offer, rejection, or transfer to the dealer). The AI therefore never independently decides the final price.
Some situations (for example exceptional offers or technical conflicts) are always routed to the dealer's staff instead of an automated decision.
Trade-in vehicle data
A separate trade-in vehicle processing path (registration number, odometer reading, condition declaration) has been built into the system, and it connects to the same price negotiation and any resulting deal summary. This functionality is implemented and tested, but is not currently part of this public demonstrator's production traffic. If/when it is enabled on the public demonstrator, this notice will be updated first.
Abuse prevention
Email-, device- and IP-level technical identifiers are used to limit a single customer's/device's repeated offer attempts on the same vehicle (e.g. a cap on the number of offers and a short cool-down once it's reached), and to detect automated abuse. These identifiers are not used for marketing, individual price formation, or behavioural profiling — they serve solely the security of the negotiation and the service.
Price is not based on a customer profile
The offered price is not based on the customer's identifying data, prior behaviour in other negotiations, conversational style, or an estimated willingness to pay. The commercial decision is based on the dealer's pre-defined rules and the data belonging to that specific transaction.
Data retention
Some demo data (e.g. the technical code used for email verification) expires automatically after a short time. A comprehensive retention-period policy covering all data has not yet been implemented — this is a recognized, open item, not a hidden gap. Until it is implemented, data may technically be stored for longer than usual. You can request deletion of your own data using the contact details below.
Your rights as a data subject
Under applicable data-protection law, you have the right to, among other things, obtain information about data stored about you, request its correction or deletion, and object to its processing. Requests concerning these rights are currently handled manually via the contact details below — automated self-service is not yet available.
Purpose of use
Data is used to carry out the price negotiation, for service security, and to understand the site's functioning and popularity. Data is not sold and is not used for marketing.
Service providers
The demo uses the following external services to process data: Anthropic (the AI conversation), Resend (sending email), and Vercel (site publishing and Web Analytics). Each processes only the data it needs for its own specific purpose.
Contact
For questions about privacy, or to exercise the rights described above, contact: hello@kopilotti.online
Updated 20 August 2026.