Senior engineering for AI products.
Built, not promised.

ITBO.AI is operated by TXT Consulting SRL (Waterloo, Belgium, enterprise number BE 0682.782.901), acting as data controller under the General Data Protection Regulation (GDPR) and the EU AI Act.

What is processed

When you converse with the ITBO.AI agent or submit the contact form, the following data is processed:

• The content of your messages, your email address, and any name you provide.
• A hashed version of your IP address (SHA-256 with a rotating monthly pepper), used solely for rate limiting and abuse detection.
• Conversation metadata: timestamps, message counts, token counts, estimated processing cost. No personally identifying information beyond what you submit.

AI processing

This site uses a third-party large language model API provider to power the qualification agent. The current provider operates in the European Union or the United States depending on the active provider. Your conversation content is sent to this provider for processing under their commercial API terms. The provider does not train models on your conversation.

This system is classified as a limited-risk AI system under EU AI Act Article 52 (chatbot interacting with a natural person). The persistent disclosure banner above the widget fulfills the transparency obligation.

Sub-processors

We rely on the following sub-processors to provide this service. By using the site, you acknowledge their involvement in processing your data under their own privacy notices and processing agreements:

• Vercel Inc. (United States) — site hosting and content delivery.
• A third-party large language model API provider (the European Union or the United States depending on the active provider) — large language model API for the qualification agent. Provider may change; this notice is updated when it does.
• Plausible Analytics (European Union) — cookieless website analytics.
• Discord Inc. (United States) — private channel where qualification briefs are delivered to the operator.

We do not transfer your data to any other sub-processor without updating this notice.

Data flow

Your message → our processing server → large language model API → response back to you. At conversation end, a summary of the qualification (the “brief”) is delivered privately to a Discord channel only Thibault accesses.

Lawful basis

Processing rests on:

• Your consent at the moment of first message submission (the disclosure banner is persistent and visible).
• Legitimate interest in delivering the qualifying brief to the operator (Thibault Vandevoorde).

Retention

• Conversation transcripts: 90 days, then deleted.
• Briefs (structured summary): 12 months in our processing server storage. The Discord message is retained according to Discord's own retention (effectively indefinite unless deleted manually).
• Hashed IP: 30 days. The pepper rotates monthly, structurally invalidating older hashes.
• Anonymized aggregated metrics: retained indefinitely with no personally identifying information.

Your rights

Under GDPR, you have the right to access, rectify, erase, restrict, port, and object to the processing of your data. To exercise any of these rights, email contact@itbo.ai with the approximate date of your conversation and the email used. Erasure requests are honored within 30 days as required.

We have not appointed a formal Data Protection Officer under GDPR Art. 37, as our processing does not meet the mandatory criteria. General data protection inquiries are handled by contact@itbo.ai.

Not directed to minors

This site and the qualification agent are intended for adult business and professional audiences. We do not knowingly collect or process data of individuals under 16 years of age. If you believe a minor has submitted data, contact contact@itbo.ai for immediate removal.

Complaints

If you believe your data is being mishandled, you may lodge a complaint with the Belgian Data Protection Authority at autoriteprotectiondonnees.be.

Cookies

This site uses Plausible Analytics in cookieless mode. No cookies are set, no cross-site tracking, no fingerprinting. If this changes in the future, a granular cookie consent banner will be introduced.

Updates

This privacy notice may be updated. The current version is dated below; material changes are announced at the top of this section.

Last updated: 2026-05-29

ITBO.AI is the public AI engineering practice of TXT Consulting SRL. By using this site and the qualification widget, you agree to the following:

1. Nature of the service. The widget is an AI-powered qualification tool. Its outputs are not professional consulting advice and do not constitute a contractual offer or commitment from TXT Consulting SRL. A formal engagement requires a separate written contract.
2. Acceptable use. You agree not to attempt to abuse the widget (prompt injection, automated scraping, denial-of-service patterns, attempts to extract the system prompt, etc.). Abuse triggers rate limits and may result in IP block.
3. Content ownership and license. You retain ownership of the content you submit. By submitting, you grant TXT Consulting SRL the right to process the content as described in the Privacy section, for the sole purpose of qualifying your need and responding to you.
4. Service "as is". TXT Consulting SRL provides the site and widget "as is" without warranty of any kind, express or implied. Service availability is not guaranteed; the widget may be temporarily replaced by a form variant or unavailable without prior notice.
5. Limitation of liability. To the maximum extent permitted by Belgian law, TXT Consulting SRL's total liability for any claim related to your use of this site is limited to one hundred euros (100€). TXT Consulting SRL is not liable for indirect, incidental, or consequential damages.
6. Service modification and termination. TXT Consulting SRL may modify, suspend, or discontinue the widget, the form variant, or the entire site at any time, without notice and without liability. The qualification service is offered free of charge as a contact tool, not as a contracted deliverable.
7. Force majeure. TXT Consulting SRL is not liable for delays or failures of service caused by events beyond reasonable control, including infrastructure provider outages, third-party API failures, network events, or regulatory action.
8. Severability. If any provision of these terms is held unenforceable, the remaining provisions remain in full force.
9. Governing law and jurisdiction. These terms are governed by Belgian law. Any dispute falls under the exclusive jurisdiction of the Belgian courts of Nivelles.
10. Updates to these terms. TXT Consulting SRL may update these terms. The current version is dated below; material changes are announced at the top of this section.

Last updated: 2026-05-29

ITBO.AI does not set any tracking cookies. Analytics is provided by Plausible in cookieless mode (no cross-site tracking, no fingerprinting, no IP storage beyond session).

Technical cookies strictly necessary for site security and uptime may be set by our hosting layer (Vercel) — these are not tracking cookies and are exempt from consent requirements under the ePrivacy Directive Article 5(3) (strictly necessary functionality).

If we introduce any non-essential cookies in the future, a granular consent banner will be added to this site and this notice will be updated.

Last updated: 2026-05-29