Who we are
Inhome Development Ltd is the controller of personal information handled through this website. Our contact address is Amathountos 20, Limassol, Cyprus. For privacy questions or requests, email build@inhome.cy.
Information we handle
When you browse the site, our hosting and security systems may process technical request data such as your IP address, request headers, device and browser information, requested pages, timestamps and security events. Rate-limiting uses a one-way hash derived from the IP address rather than storing the address in the intake database.
If you make an enquiry, we handle the information you choose to give us, which may include your name, company, email address or Telegram handle, project requirements, budget range, conversation, Product Blueprint, consent record and delivery status. Please do not provide passwords, payment-card or bank details, health data, identity documents or other sensitive personal information.
Rossi AI Product Intake
Rossi is an AI product architect. It sends your messages and relevant conversation context through Vercel AI Gateway to the configured AI model provider to develop a preliminary Product Blueprint. We also record operational events, model usage and errors needed to run, secure and improve the intake. These records are not used for advertising.
The conversation and blueprint are stored on our server using Neon PostgreSQL. When you voluntarily submit contact details and consent to follow-up, we attach the blueprint and transcript to your enquiry and notify our team. A provider accepting a notification is not a promise that a particular inbox received or read it. Rossi does not make a legal or similarly significant decision about you; its output is preliminary and requires human engineering review.
Purposes and legal bases
We process enquiry information to answer your request, prepare a Product Blueprint and take steps toward a possible engagement. The legal basis is taking steps at your request before entering a contract and, where applicable, performing a contract. Where the intake asks for consent to contact follow-up, consent is the basis for that follow-up and you can withdraw it at any time.
We process limited technical and operational data for our legitimate interests in delivering, securing and protecting the website, preventing abuse and maintaining reliable records. We may also retain information where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
Enquiry delivery
Rossi enquiries are processed by our hosting, database, AI and email delivery providers and may reach our corporate mailbox. On any page that prepares an email draft, nothing is sent until you confirm it in your own email application. We show delivery status only where the relevant provider confirms it.
The WhatsApp button is an external link. Merely viewing this website does not send your information to WhatsApp through that link. If you choose the button, WhatsApp opens and WhatsApp or Meta processes your connection and any message you decide to send under its own privacy policy. We receive the account details, message content and attachments you choose to share in that conversation.
Browser storage and cookies
Rossi uses one necessary, secure, HttpOnly, same-site session cookie named inhome_intake. It contains a random session token and lets this browser resume the server-side conversation for up to 30 days. Rossi conversation content and contact details are not stored in browser local storage.
Some interactive demonstrations and draft forms store their progress in this browser's session storage or local storage so that an unfinished step can be restored. Session storage normally ends with the browser session; a local draft remains until it is submitted, reset or cleared in browser settings. These browser-only records are not advertising trackers. We do not currently run advertising pixels or optional analytics cookies.
Service providers and international transfers
We use Vercel for hosting and AI Gateway, Neon for PostgreSQL, the AI model provider configured for Rossi, and email infrastructure for enquiry notification and correspondence. They process information only for the service they provide to us under their applicable terms. We may also disclose information where law requires it or where needed to protect legal rights. We do not sell personal information or share it for targeted advertising.
Some providers operate internationally, so information may be processed outside Cyprus or the European Economic Area. Where GDPR requires a transfer safeguard, the transfer is subject to an applicable mechanism such as an adequacy decision or standard contractual clauses. You can ask us for information about the safeguard relevant to your data.
How long we keep information
An anonymous Rossi session expires after 30 days and is then eligible for operational deletion. Detached operational events are removed after 90 days, and expired rate-limit records are removed by the retention process. If you submit an enquiry, we retain the associated contact record, blueprint, transcript and correspondence only while needed to manage the enquiry, a resulting business relationship, applicable accounting or legal duties, or legal claims. We delete or anonymise it when those purposes no longer apply. You can request earlier deletion, subject to information we must retain by law.
Your rights
Depending on the circumstances, you can ask for access to your personal information, correction, erasure, restriction of processing or data portability, and you can object to processing based on legitimate interests. You also have the right to withdraw consent at any time without affecting processing already carried out lawfully. Email build@inhome.cy to make a request. We may need reasonable information to verify your identity.
You may lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or with the supervisory authority where you live or work.
Changes to this notice
We will update this notice when the website's data practices change and publish the revision date here. Any future optional tracking will require an appropriate consent choice before activation.
Last updated: 21 September 2026.