Hello,re:Invent 2026.

Draft for legal review. Last updated October 3, 2026.

Who is responsible

Prasad Tilloo runs this demo and is the controller under the EU General Data Protection Regulation (GDPR). Address and contact details are in the Impressum panel below.

What data is processed

This page sets no cookies, runs no scripts and loads nothing from other servers. It is hosted on GitHub Pages, so GitHub receives your IP address when the page loads.

On WhatsApp, the demo stores:

• your phone number
• the messages and photos you send
• the answers it sends you
• a count of how many answers you received today

The demo also writes technical logs: the time, the type and length of each message, what the photo check found, and the first three digits of your number. The logs hold no message text, no photo and no full phone number.

In the web demo, there is no phone number and your questions are not saved. To limit use, the demo keeps a scrambled form of your IP address and of a random ID for one hour. Your browser keeps that random ID.

Why, and on what legal basis

• To answer your questions: Article 6(1)(b) GDPR. You start the chat and ask for an answer.
• To count how the demo is used and to keep it within its limits: Article 6(1)(f) GDPR. The interest is running a public demo safely and learning how it is used.

Answers are written by an AI model and can be wrong. No decision with legal effect is made about you.

How long data is kept

WhatsApp demo records expire 7 days after they are written. Amazon's storage then removes them, usually within a few days. To delete them at once, send DELETE in the chat.

Technical logs are kept for 90 days.

If your first message does not contain “re:Invent”, the demo starts its farmer sign-up instead. A sign-up you do not finish expires after 7 days. If you finish it, your profile stays until you send DELETE, and your messages are kept for 90 days.

Who receives the data

• Amazon Web Services stores the data and runs the software and the AI model, in its US East (N. Virginia) region.
• Meta carries the WhatsApp messages and keeps its own copy under WhatsApp's privacy policy.
• GitHub hosts this page.

All three are in the United States, so your data leaves the European Union.

Your rights

You can ask for a copy of your data, for a correction, for deletion or for restricted use. You can object to the use described under Article 6(1)(f), and you can ask for your data in a portable format. You can also complain to a data protection authority, for example the one where you live.