Last updated: 13 October 2026. Version: 2026-10-13.
This page contains our Privacy Policy, Cookie Policy, US and California Privacy Notice, information about AI processing, and our data retention periods. Our Terms and Conditions explain the rules for using JuicyAgents.
Who is responsible for your data
JuicyAgents is operated by Maciej Chmura IdeaUnlock, ul. Tadeusza Kościuszki 1, 32-020 Wieliczka, Poland. NIP / VAT ID: 8652425764. REGON: 18070444800000.
Maciej Chmura IdeaUnlock is the controller of personal data used to operate JuicyAgents. This means we decide why and how that data is processed. “We,” “us,” and “our” refer to this operator.
For privacy questions, access or deletion requests, objections, and security reports, contact hi@alwaysqa.com. Please include “JuicyAgents privacy” in the subject. You can also write to our business address above.
We are established in Poland. Our processing is subject to the EU General Data Protection Regulation, or GDPR, and applicable Polish law, including rules on electronic communications. Other privacy laws may apply to particular users or activities.
What this policy covers
This policy explains how we process personal data when you browse the JuicyAgents directory, search for agents, recipes, or skills, use Find My Agents and our free tools, subscribe to updates, sign in, review a recipe or report a review, buy us a coffee, submit an agent, or contact us.
It also covers paid advertising and paid listings or boosts if we offer them in the future. We will give the relevant information when we collect the data and update this policy before introducing materially different processing.
JuicyAgents helps people discover third-party agents, bots, skills, and tools. It is not an agent execution service. Copying a guide into another AI tool does not make JuicyAgents the operator of that tool or give us access to the activity inside it.
This policy does not govern another provider's website, software, AI service, or payment service when that provider processes data for its own purposes. Review its own privacy information before using it.
Personal data we collect
We collect only information relevant to the activity you choose and the operation of the website. Not every category below is collected from every visitor.
Scroll sideways to see all columns.
| Activity | Relevant personal data | How we obtain it |
|---|---|---|
| Website access and security | IP address, browser or user agent, request time, requested page, session identifier, and information needed to investigate errors or abuse | Your browser, our web service, and infrastructure providers |
| Search and filters | Search words and selected filters; a request may associate them with technical identifiers in operational logs | Search requests you send |
| Find My Agents | The website address or business description you enter, the public pages we read from that website, your answers about tasks, tools, AI assistants, budget, and company size, and the plan we create | The form you submit and the public website you name |
| Find My Agents plan by email | The email address you enter and the plan we send to it | The form you submit |
| Find My Agents feedback | Whether a suggestion was useful, not a fit, or tried, an optional reason, and a random plan identifier; your name and email are not attached | The feedback form you submit |
| Newsletter signup | Email address, the version of the consent text, consent time, and record creation/update times | The signup form you submit |
| Accounts | Name, email, avatar, login-provider user ID, verification status, session information, and account timestamps | You and WorkOS, our login provider |
| Recipe reviews | Your account name, star rating, optional comment, the recipe, setup guide, and platform you reviewed, dates, and whether a moderator hid or restored the review | You, when signed in, and our moderation records |
| Review reports | The review you report, the reason, an optional note, your account, and the report date | You, when signed in |
| Coffee payments | Amount, currency, payment status, Stripe checkout reference, and the contact and billing details you enter at Stripe Checkout, such as your email address and country | You and Stripe |
| Agent submissions | Submitter contact details, creator identity, the agent's description, links, pricing, and setup details, and any promotional material you send | Your email to us, sent by you or an authorised representative |
| Support and enquiries | Name or other contact information you provide, message content, relevant correspondence, and any attachments you choose to send | Your messages to us |
| Publicly sourced directory entries | Public author or professional identity, business/product information, source links, and relevant attribution | Public product websites, documentation, repositories, or an authorised submitter |
| Advertising and paid orders, if offered | Customer or business contact details, billing address, tax number where relevant, order details, invoices, payment status, transaction reference, and payment-provider metadata | You, your authorised representative, and the payment provider |
| Privacy requests and content reports | Contact details, the relevant listing or account, the request or report, supporting evidence, and proportionate identity-verification information where needed | You, an authorised representative, or a reporting person |
Search terms may appear in the page URL, browser history, and normal server requests. Do not put passwords, private keys, confidential documents, or personal details about other people into directory search fields.
The MCP config generator counts, per day, how often each client is selected and how often a configuration is copied or downloaded. These counts contain no personal data.
Find My Agents
Find My Agents keeps your business details, answers, and plan with your browser session and stops using them after one hour. You can clear them sooner with “Start with another business”. When you enter a website, our server requests its public pages. That website sees a request from our server, not from your device. Do not enter confidential information.
If you ask us to email your plan, we use your email address only to send that email. We do not add it to the newsletter or save it with your feedback.
Newsletter
The newsletter database stores the email and consent evidence described above. Signup alone does not create an account. We do not require you to join the newsletter to browse the directory.
You can withdraw newsletter consent by contacting our privacy email or using the unsubscribe method in a newsletter you receive. We do not subscribe you because you submit a listing, use Find My Agents, buy us a coffee, or accept our Terms. If individual email-open or link-click measurement is introduced, we will explain it and meet any separate consent requirements; a newsletter subscription is not blanket consent to tracking.
Accounts and reviews
You need an account to review recipes or report reviews. Sign-in uses WorkOS AuthKit, and JuicyAgents receives your name, email, avatar, and WorkOS user ID from it. We do not store a password; WorkOS handles authentication.
When you review a recipe, your account name, rating, comment, and the review date are shown publicly on the recipe page. You can edit or delete your review at any time. When you report a review, we do not tell the reviewer who reported it.
You can delete your account in your account settings. This deletes your JuicyAgents account, your reviews, and your reports, and asks WorkOS to delete your login account.
Coffee payments
Buying JuicyAgents a coffee is optional. Payment happens on Stripe Checkout: you enter your card details directly with Stripe, and we never receive your full card number or security code. Stripe tells us whether the payment succeeded, and we keep the checkout reference with your session to confirm it. In our Stripe account we can see the payment and the contact and billing details you entered at checkout. Do not send card details to our inbox.
What you must provide and what is optional
Technical request information is needed to deliver and protect the website. An email address is needed only if you choose an email-based service, such as the newsletter, emailing your Find My Agents plan, or a reply to an enquiry. Relevant identity and account information is needed if you choose to sign in, which you need to do to review recipes or report reviews.
If you submit a listing or purchase advertising, we may need contact details, authority information, and billing data to review the submission, perform the order, or meet legal duties. Without required information, we may be unable to provide that particular service.
Giving us information does not make every use of it lawful. This policy explains the purpose and legal basis for our processing; it is not a general consent to marketing, AI processing, or tracking.
Why we use data and the legal basis
Scroll sideways to see all columns.
| Purpose | GDPR basis | What this means for JuicyAgents |
|---|---|---|
| Deliver requested pages and essential website functionality | Legitimate interests, Article 6(1)(f), where no personal contract applies | Our interest is running an accessible and reliable directory with proportionate technical processing |
| Provide an account or a service requested by the individual | Contract or steps requested before a contract, Article 6(1)(b) | We use data necessary to provide the service you request |
| Create, email, and download your Find My Agents plan | Contract or steps you request, Article 6(1)(b), or legitimate interests, Article 6(1)(f) | We use your answers only to build and deliver the plan you ask for |
| Improve Find My Agents from feedback | Legitimate interests, Article 6(1)(f) | Our interest is better recommendations; feedback is not linked to your name or email |
| Publish recipe reviews and handle review reports | Contract, Article 6(1)(b), for the review feature; legitimate interests, Article 6(1)(f), for moderation | We show honest reviews and remove content that breaks our Terms |
| Process coffee payments | Contract, Article 6(1)(b), and legal obligation, Article 6(1)(c), for accounting records | We confirm your payment and keep the records the law requires |
| Communicate with a business's staff or representative | Legitimate interests, Article 6(1)(f) | Our interest is managing the business relationship; the individual employee is not automatically a party to the company's contract |
| Handle agent submissions and agreed advertising | Contract where the individual is the contracting party; otherwise relevant legitimate interests | Review, publication, contact, and order delivery are limited to the relevant service |
| Send the optional newsletter | Consent, Article 6(1)(a), and applicable electronic-marketing consent rules | Signup is a separate choice; you can withdraw it |
| Publish relevant professional information obtained from public sources | Legitimate interests, Article 6(1)(f), following a balancing assessment | Our interest is useful attribution and discovery; public availability does not remove privacy rights |
| Prevent spam, fraud, attacks, or unauthorised access | Legitimate interests, Article 6(1)(f), and legal obligation where relevant | We protect users and the service without collecting more information than needed |
| Manage invoices, taxation, accounting, and lawful authority requests | Legal obligation, Article 6(1)(c) | We keep and disclose only the records relevant to the duty |
| Handle complaints, privacy requests, and legal claims | Legal obligation where applicable; otherwise legitimate interests | We document responses, comply with rights, and establish or defend claims |
Where we rely on legitimate interests, we assess necessity, proportionality, and the effect on your rights. You can object. Where we rely on consent, withdrawing it does not affect processing that was lawful before withdrawal.
Public listings and information about other people
Public listing fields and materials approved for publication are intended to be visible to visitors. The same applies to recipe reviews. They may also be indexed by search engines, linked from previews, or copied by people who can see them. Submitters should use appropriate business contact information and avoid unnecessary personal details.
Private account, billing, support, and newsletter fields are not public listing fields. A paid advert does not give the advertiser access to our mailing list or visitors' private account information.
If you submit information about someone else, you must have authority and a lawful basis to do so and provide any notices you are responsible for. This does not remove our own controller duties. We may ask you to remove unnecessary personal details or demonstrate your authority.
For personal information obtained indirectly, including a professional identity in a source repository, we identify the source and provide the information required by law, normally no later than one month after collection, or at the first communication or disclosure if earlier, unless a specific lawful exception applies. Public availability alone is not an exception. You can contact us to ask about the source, correct an attribution, object, or request removal.
When we must erase personal information we have made public, we take the reasonable follow-up steps required by law. We cannot promise that every independent copy or search-engine cache will disappear immediately. That practical limit does not remove your legal rights or our duty to act.
Do not include health information, identity-document numbers, bank credentials, private keys, children's information, or other sensitive information in a public submission or review. If we receive unnecessary sensitive data, we assess lawful removal or restriction rather than treating submission as permission to publish it.
Who receives data
We may disclose relevant information to authorised people and providers who support the activities described here, including hosting, databases, authentication, email delivery, payments, accounting, technical support, and security.
Providers processing data for us must be subject to appropriate processing terms and safeguards. Some providers also process information as independent controllers for their own legal or service purposes, for example fraud prevention by a payment provider.
Scroll sideways to see all columns.
| Recipient or category | Purpose and relevant data | Notes |
|---|---|---|
| WorkOS | Sign-in, account, and session information | Our login provider; see the WorkOS Privacy Policy |
| Stripe | Coffee payments and, if offered, paid orders | Our payment provider; Stripe also processes some data as an independent controller, for example to prevent fraud. See the Stripe Privacy Policy |
| Hosting, database, and backup providers | Website requests, stored account, review, subscription, and feedback data, and backups | Process data on our behalf |
| Email delivery and support providers | Find My Agents plan emails, newsletters when we send them, and correspondence | Process data on our behalf |
| Websites you ask Find My Agents to read | A request from our server for their public pages | They do not receive your IP address or your answers from us |
| Accounting providers | Order, billing, tax, payment-status, and transaction information | Only where needed for accounting |
| Professional advisers and public authorities | Relevant records needed for advice, a legal duty, or a claim | Shared only where a lawful basis and need exist |
| Public visitors and search engines | Published listing and advert fields, and recipe reviews with the reviewer's account name | Does not include private billing, account, or subscriber records |
We do not use analytics or advertising-technology providers.
We do not sell our newsletter list or provide it to sponsors. Advertising buys a placement on JuicyAgents, not a right to obtain identifiable visitor data. Any campaign reports are limited to agreed, appropriate information; where reports are described as anonymous or aggregated, they do not identify individual visitors.
We may disclose data for a lawful authority request, to establish or defend a claim, or to address a serious security issue. We assess the basis and disclose only what is relevant.
If the business is transferred or reorganised, relevant data may pass to the successor where lawful and necessary. The recipient must have an appropriate basis and protection for the data. We give notice where required. This is not permission for unrestricted new uses.
International transfers
We are based in Poland. Some providers, including WorkOS and Stripe, are based in the United States, and a provider may store data or access it from outside the European Economic Area, including through remote support.
Where a restricted international transfer takes place, we use a permitted mechanism, such as an adequacy decision, including the EU–US Data Privacy Framework where the recipient is certified, or the European Commission's standard contractual clauses, with additional measures where required.
You can ask hi@alwaysqa.com for information about the applicable safeguard or a copy where available, with confidential information removed where necessary.
Security
We are responsible for using security measures appropriate to the processing and its risks. These include encrypted connections to the website, suitable access restrictions, and protection of the systems used to handle data.
Keep your own login details safe and avoid sending secrets or payment credentials in messages or public fields. These precautions do not transfer our security duties to you. If a personal-data breach requires notification, we notify the appropriate authority or affected people within the legally required times and conditions.
Your GDPR rights
Subject to the legal conditions, you can request access, correction, deletion, restriction of processing, or a portable copy of qualifying data. You can object to processing based on legitimate interests and withdraw consent. An objection to direct marketing stops that marketing.
You can delete your account, reviews, and reports yourself in your account settings. Send other requests to hi@alwaysqa.com. Identify the JuicyAgents feature and information involved. We may request proportionate information to verify identity or authority; do not send a passport, password, or API key unless a specific lawful verification need has been explained.
We normally respond within one month. Where permitted for complex or multiple requests, we may extend by up to two further months and explain the extension within the first month. Requests are normally free; any refusal or fee must have a lawful basis and be explained.
You can complain to the President of the Polish Personal Data Protection Office, Urząd Ochrony Danych Osobowych, ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland, through UODO contact information. You may also complain to the competent authority where you live or work. Contacting us first is not compulsory.
Children
JuicyAgents account, submission, review, and paid features are intended for adults aged 18 or over. We do not seek children's information for those services. This is not a claim that every visitor's age has been verified.
If you believe a child has supplied personal data, contact us so we can assess removal, restriction, and any legal obligations. We do not use children's data for behavioural advertising or ask children to submit public profiles.
Third-party links and tools
When you follow an agent, skill, repository, or sponsored link, your browser connects to the destination. That site receives technical connection information and may collect additional data under its own policy. Do not assume its privacy practices match ours.
JuicyAgents does not receive the private conversations or agent outputs you create in an external AI tool simply because you reached it through our directory. If you later send those materials to us for support, we process the message you provide for that purpose.
Cookie Policy
Cookies and browser storage
Cookies store small pieces of information in your browser. Local storage keeps values on your device until they are removed. Both can be subject to privacy and device-storage rules.
We use only storage needed to provide the website and the features you ask for, and storage that remembers your preferences. We do not use analytics or advertising cookies. If we introduce optional cookies, we will ask for your consent before they are used, and you can refuse. Consent is not inferred from browsing, accepting Terms, or buying an advert.
Cookie and storage inventory
Scroll sideways to see all columns.
| Cookie or storage | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
| Session cookie | JuicyAgents | Keeps you signed in, remembers Find My Agents progress and coffee checkout status, and handles forms | 2 hours after your last activity | Necessary |
XSRF-TOKEN |
JuicyAgents | Protects forms against cross-site request forgery | 2 hours after your last activity | Necessary |
appearance cookie |
JuicyAgents | Remembers the light, dark, or system appearance you choose | Up to 365 days | Preference |
appearance local storage |
JuicyAgents | Applies the appearance preference in your browser | Until you clear site data | Preference |
juicyagents:recipe-settings:… local storage |
JuicyAgents | Remembers the setup choices you enter on a recipe, so its prompt stays filled in | Until you clear site data | Preference |
sidebar_state |
JuicyAgents | Remembers whether the account sidebar is open | Up to 7 days | Preference |
| WorkOS cookies | WorkOS | Sign-in and security on the WorkOS sign-in pages | Set by WorkOS under its own policy | Necessary for sign-in |
| Stripe cookies | Stripe | Payment processing and fraud prevention on Stripe Checkout | Set by Stripe under its own policy | Necessary for payment |
Cookie expiry is not a promise that all corresponding server records are deleted at that moment. Server-record retention is described in Data Retention. Clearing browser storage also does not delete your newsletter record or account.
Analytics and advertising
JuicyAgents does not use third-party analytics, advertising, or tracking cookies, pixels, or scripts.
If we introduce optional analytics or advertising measurement, we will disclose the provider, events, identifiers, recipients, duration, and purposes before using it, and ask for your consent where required. You can decline without being subscribed or signed up to anything else.
Paid sponsorship does not itself require behavioural tracking. Sponsored placements, if we offer them, are selected by page or category rather than a person's cross-site profile.
Your cookie choices
You can block or delete cookies and site storage through your browser. If you block necessary cookies, signing in, forms, and Find My Agents may stop working. Because we use only necessary and preference storage, we do not show a cookie banner.
Questions or requests can be sent to hi@alwaysqa.com.
US and California Privacy Notice
When this section applies
This section gives additional information for US visitors. Specific US state laws apply only where their legal conditions are met. A visitor being in California does not by itself establish that every CCPA business obligation applies to JuicyAgents.
Where the California Consumer Privacy Act, as amended, or another state privacy law applies, we honour the rights it provides.
Categories, sources, purposes, and disclosure
The collection, source, purpose, recipient, and retention descriptions in this policy also form our US notice.
Scroll sideways to see all columns.
| Information category | JuicyAgents examples | Purposes and recipients |
|---|---|---|
| Identifiers | Newsletter email; email for a Find My Agents plan; IP and session identifiers; name, contact, and login ID for accounts | Requested services, communication, security; hosting, email, and login providers |
| Internet or electronic activity | Requested pages, browser details, search requests, and session activity | Deliver the site and prevent abuse; infrastructure providers |
| Professional information | Public author attribution and product affiliation; business representative details where supplied | Directory publication and business communication; published fields go to visitors, private fields to relevant service providers |
| Commercial information | Coffee payments; advertising orders and invoices if paid services are offered | Payment handling and accounting; Stripe and accounting providers |
| Communications | Enquiries, submissions, complaints, content reports, and privacy requests you send | Respond and document lawful handling; authorised staff and relevant support providers |
| Content you publish | Recipe ratings and comments | Shown publicly with your account name |
| Sensitive personal information | Account login information where the legal definition includes it; not intentionally sought for public listings | Account security and service delivery; not used to infer sensitive personal characteristics |
| Location or inferences | We do not collect precise geolocation or build interest profiles about you | Not applicable |
We do not request biometric identifiers, government ID numbers, health information, or precise location for ordinary directory browsing or newsletter signup. Receiving an unnecessary sensitive attachment does not authorise us to use it for another purpose.
Sale, sharing, and targeted advertising
We do not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising, and we have not done so in the past 12 months. Selling an advertising placement on JuicyAgents is not selling personal information, and sponsors do not receive subscriber addresses or private account data.
Because we do not sell or share personal information, there is nothing for a Global Privacy Control signal to opt you out of today. If that changes, we will honour such signals where the law requires. We do not respond to Do Not Track signals, because we do not track visitors across websites.
Stripe and WorkOS process connection data when you use their payment or sign-in pages, under their own policies.
California rights and how to exercise them
Where the CCPA applies, you may request access or knowledge of covered data, deletion, correction, an opt-out of sale/sharing, or a limit on qualifying sensitive-data use. You may also receive qualifying information in a usable format. We do not unlawfully discriminate for exercising these rights.
Send a request to hi@alwaysqa.com with “JuicyAgents California privacy” in the subject. You may use an authorised agent, subject to lawful authority and verification requirements. We do not require an account solely to submit a privacy request. An opt-out does not require the same identity verification as an access request.
For applicable California access, correction, or deletion requests, we acknowledge receipt within 10 business days and normally respond within 45 calendar days. A permitted extension is explained. Other rights and laws may have different deadlines; the applicable deadline takes priority.
Other US state rights
Depending on the applicable state law, you may have rights to access, correct, delete, obtain a copy, or opt out of specified processing, including targeted advertising or qualifying profiling. Where a law provides an appeal against a refused request, contact us with “JuicyAgents privacy appeal” and the relevant decision. We explain the outcome and further complaint options as required.
We do not offer a financial-incentive programme involving personal data. Any such programme would require a separate notice before launch.
AI Processing
AI tools listed in the directory
JuicyAgents lists tools and publishes guides. It does not run your chosen third-party agent or collect its private conversations or outputs merely because you use a directory link or copy an example. The AI provider determines its own handling, retention, and training practices under its terms and privacy information.
Check those practices before uploading real customer, employee, business, or other confidential data. A listing or sponsored label is not a privacy certification.
Processing by JuicyAgents
JuicyAgents does not send your personal data to AI models. Search, filters, and Find My Agents use rules and text matching that run on our own servers.
If we introduce AI processing of personal data, we first assess and disclose the actual purpose, data, provider, legal basis, recipients, transfer arrangements, retention, and relevant choices. We do not treat acceptance of the Privacy Policy as blanket authorisation to send private submissions or messages to an AI provider.
Training and private information
We do not use subscriber addresses, private account and billing records, private support messages, or Find My Agents answers to train AI models, and we do not supply them for anyone else's model training.
Making a listing public does not give JuicyAgents permission to reuse personal data for any unrelated training purpose. However, other people may access public pages, and we cannot guarantee that an independent party will never copy publicly available content. We handle rights requests and required protective steps under applicable law.
Do not submit secrets, raw identity documents, or unnecessary sensitive data in public prompts, screenshots, share links, reviews, or agent descriptions. Use synthetic or appropriately anonymised examples. Replacing a name with a code does not necessarily make data anonymous.
Automated decisions
Search, sorting, and Find My Agents suggestions are not decisions that determine eligibility for employment, lending, insurance, or a similar significant matter.
If future automation makes a decision about a person with legal or similarly significant effects, we will assess the applicable restrictions and explain any required information and safeguards before using it. Those safeguards may include human review and a way to challenge the decision. This policy is not a waiver of rights relating to automated decisions.
Data Retention
How long information is kept
We retain personal data only while it is necessary for its stated purpose or a specific legal duty. We assess the purpose, ongoing relationship, legal record requirements, and any genuine dispute or security need. We delete or properly anonymise information when it is no longer needed.
Pseudonymised information remains personal data where a person can still be identified. Hashing an email address or removing a name does not automatically remove privacy obligations.
Retention schedule
These are the longest periods we keep each kind of information. We delete it sooner when we no longer need it.
Scroll sideways to see all columns.
| Data | Period or governing criterion | Handling and limits |
|---|---|---|
| Newsletter delivery email | Until you unsubscribe or withdraw consent, we close the newsletter, or earlier deletion is required | Marketing stops promptly; active delivery records are kept separate from evidence or suppression records |
| Newsletter consent evidence | While we rely on the consent, and up to 3 years after withdrawal or last relevant use | Kept only as evidence for accountability or a claim; never used to continue marketing |
| Suppression record | Only while needed to honour your marketing opt-out | Minimal identifier with a restricted purpose; not a replacement marketing list |
| Find My Agents answers and plan | Used for up to 1 hour, then removed with your session record | Kept only with your session |
| Find My Agents feedback | Up to 24 months | Not linked to your name or email |
| Account profile | While the account is active; removed when you delete your account | Account deletion does not delete invoices, a separate newsletter subscription, or Stripe's own records |
| Recipe reviews and review reports | Until you delete them or your account, or we remove them | A hidden review stays visible to its author until it is deleted |
| Limited account/security history after closure | Up to 24 months where needed for a documented security or dispute purpose | We do not keep the entire account profile for this period |
| Agent submissions, support, and routine correspondence | Up to 36 months after the last relevant interaction | Deleted earlier where no continuing need exists; legally required complaint records are kept separately |
| Uncompleted advertising enquiry | Up to 12 months after the last meaningful contact | No automatic newsletter enrolment or indefinite prospecting |
| Public listing and creator attribution | While published and relevant; unnecessary personal information is removed or updated after a valid request or closure | Public visibility and private administrative records are separate |
| Rejected or withdrawn submission records | Up to 12 months after the final decision, unless a documented appeal or claim needs longer | Only the information needed to explain and review the decision |
| Coffee payments, orders, invoices, and accounting records | For the period required by Polish tax and accounting law | Not deleted on account closure where the law requires retention |
| Technical and security logs | Up to 90 days; specifically isolated incident evidence up to 12 months where justified | Secrets and unnecessary form contents are not logged |
| Session cookie and session records | Sessions expire 2 hours after your last activity; expired records are removed by routine cleanup | An expired browser cookie does not mean the server record was deleted at the same moment |
| Backups | Rolling cycle of up to 90 days | Restricted access; deleted records do not return to normal use after a restore |
| Privacy requests, disputes, and legal holds | Only as long as needed to document compliance or resolve the specific issue, and the applicable limitation period | Each hold has a reason and review date; no indefinite hold on every record |
Deletion and public copies
You can delete your account, reviews, and reports in your account settings, or request deletion through hi@alwaysqa.com. A separate newsletter record may still exist; tell us if you also want to withdraw that subscription. Your statutory request is not limited to the scope of a product button.
Deleting active records may not immediately remove every restricted backup copy. Those copies are removed through the backup cycle and are not used for new marketing or ordinary account activity. We instruct providers and handle disclosed/public copies as required by law.
Where deletion is lawfully refused for certain records, we explain the reason and applicable rights. A payment dispute, tax requirement, or security incident does not justify keeping unrelated information indefinitely.
Changes and contact
We update this notice when the actual service or data practices change. Material changes are explained on the website and, where appropriate, through direct notice before the new processing begins. New processing that needs consent is not authorised merely by publishing an updated notice or by continued browsing.
For questions or privacy requests, contact Maciej Chmura IdeaUnlock at hi@alwaysqa.com or ul. Tadeusza Kościuszki 1, 32-020 Wieliczka, Poland.