Privacy.

Devon Krantz is the operator of this site (“we,” “us,” or “Chaos Theory”), based in Cape Town, South Africa. For privacy questions or requests, email devonkrantz@gmail.com.

Contact form submissions. When you use the form at /contact, we collect what you type into it: your name, email, company / project description, how you found us, what you're exploring, stage, and any notes. This is sent by email to Devon so she can reply.

Ask Chaos conversations. When you chat with Chaos, the messages you send and the responses Chaos generates are sent to Devon by email after the chat ends, along with a session ID, the time, and approximate location (city / country, derived from your IP address by our hosting provider). Devon reads these to improve Chaos and to follow up with people who don't complete the contact form.

Automatic technical data. Standard server logs (IP address, user agent, requested URL, timestamp) are kept by our hosting provider for operational and security purposes. We do not tie these logs to any individual unless required to investigate abuse.

Cookies. We don't set tracking or marketing cookies. The site uses no analytics tools that profile you. Your browser may store small amounts of state required for the site to function (e.g., font caching).

Under POPIA, GDPR, and similar laws, we rely on two lawful bases:

Consent. By submitting the contact form or sending a message in Chaos, you're asking us to handle that information so we can respond. You can withdraw that consent and request deletion at any time (see “Your rights”).

Legitimate interest. Standard server logs are kept to operate the site, prevent abuse, and meet our security obligations. We balance this against your privacy and don't use those logs for marketing or profiling.

We don't sell, rent, or trade your data. We use a small number of trusted processors who help operate the site:

Vercel hosts this site and processes server logs (including IP addresses and approximate location). Vercel privacy policy.

Anthropic powers Chaos via their Claude API. The content of your chat messages is sent to Anthropic to generate replies. Anthropic does not, by default, train their models on this data. Anthropic privacy policy.

Resend delivers contact-form submissions and Chaos transcripts to Devon's email. Resend privacy policy.

Google (Gmail) is where Devon reads the resulting email. Google privacy policy.

We may disclose information if compelled by law (subpoena, court order, regulatory request). If that ever happens, we'll tell you unless legally prohibited.

Some of these processors are based outside South Africa and the EU/UK (notably in the United States). They are bound by their own privacy commitments and, where required, standard contractual clauses or equivalent safeguards. By using the site, you consent to this transfer.

Contact form submissions and Chaos transcripts stay in Devon's email until she archives or deletes them. Email is retained as part of normal business correspondence — typically as long as it's relevant to a current or potential engagement, plus a reasonable period after.

Server logs are kept by Vercel under their standard retention windows (typically days to weeks).

You can request deletion at any time, and we'll honour it within 30 days unless we have a legal obligation to retain something.

Depending on where you live, you have the right to access, correct, delete, restrict, or export your personal information. South African residents have rights under POPIA. EU/UK residents under GDPR. California residents under CCPA. Other jurisdictions may grant similar rights.

To exercise any of these, email devonkrantz@gmail.com with a subject line like “privacy: deletion” or “privacy: access.” We may need to verify your identity before acting. We'll respond within 30 days.

You can also lodge a complaint with the Information Regulator (South Africa), your national data protection authority (EU/UK), or the California Attorney General — but please reach out first so we can try to fix it.

This site isn't designed for anyone under 16. If you're under 16, please don't use the contact form or Chaos. If you believe a child has provided us with information, email us and we'll delete it.

We use HTTPS across the site, encrypt secrets at rest, and follow reasonable practices to protect data in transit and at rest. No online service is 100% secure. If we ever discover a breach affecting your data, we'll notify you and the relevant authorities as required by law.

If we materially change how we handle data, we'll update the date at the top of this page and, where appropriate, notify people with active engagements by email. Continued use of the site after an update means you accept the new version.

Devon Krantz — devonkrantz@gmail.com — Cape Town, South Africa.