Privacy Policy
Last updated 11 September 2026
This covers two places: the Knaqq Labs website at knaqqlabs.com and the client portal at my.knaqqlabs.com. Knaqq Labs is the data controller for both. If you want anything here explained or acted on, email matt@knaqqlabs.com.
What we collect
If you use the enquiry form on the website
- The name, email address and message you type.
- The time the page was loaded, used to reject automated submissions.
If you create an account on the portal
- From Google, when you sign in: your name, email address, profile picture and Google account identifier. We do not receive your password and cannot act on your Google account.
- From you: phone number, billing address, and optionally company, job title and website.
- About your work: the project name, description, type, budget range and timeline you enter, along with any notes you post on a project.
- Payment details: collected directly by Stripe. Card numbers never reach our servers. We store only what Stripe returns for display, meaning the card brand, the last four digits and the expiry month and year.
- Technical: a session cookie, a flag cookie described under Cookies below, and your IP address transiently for rate limiting.
Why we collect it
To reply to you, to quote and deliver work, and to invoice for it. The legal basis is performance of a contract, or the steps taken before entering one at your request. Spam prevention and rate limiting rest on our legitimate interest in keeping the service usable.
We do not sell your information, we do not share it for advertising, and we do not send marketing email. Every email we send is about a project or an account action.
Who processes it on our behalf
| Service | What it handles | Where |
|---|---|---|
| Amazon Web Services | Website hosting, enquiry handling, email delivery | United States |
| Fly.io | Portal hosting and its database | United States |
| Sign-in only | United States | |
| Stripe | Payment details and any invoicing | United States |
| Cloudflare | Anti-spam check on the enquiry form, loaded only once you start filling it in | Global |
This website runs no analytics or visitor tracking at all. Nothing about your visit is recorded or shared with an analytics company.
Cookies and local storage
The portal sets two cookies, both essential and neither used for advertising or tracking. The first keeps you signed in. The second is a flag that records only that this browser has signed in at some point: it holds no name, no address and no session, and it exists so the website can tell whether it is worth asking the portal who you are. Both last 30 days, or until you sign out, at which point both are cleared.
Because of that flag, the website makes a request to the portal to greet you by name when you are already signed in. That request goes only to our own portal, and only if you have signed in before. If you never have, the website makes no such request at all.
The portal also remembers your light or dark theme choice in your browser's local storage. That never leaves your device and is never sent to us.
You are not asked to accept any cookies because none of them are used for advertising or tracking.
How long we keep it
- Enquiries: as long as the conversation is live, and afterwards only if it turned into work.
- Portal accounts and projects: for as long as the account exists, and afterwards only where we are required to keep records, chiefly invoices for tax purposes.
- Backups: daily snapshots kept for 14 days, so deleted data can persist in a backup for up to that long.
Your rights
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to a data protection authority. Email matt@knaqqlabs.com and we will respond within 30 days. You can correct most details yourself on the Account page in the portal.
Deleting your account removes your profile, projects and notes. Where we must keep an invoice record, we keep the invoice and nothing more.
Security
Everything is served over HTTPS. Sign-in is handled by Google, so there is no password of yours for us to lose. Card details go straight to Stripe and are never received, logged or stored by us.
No system is perfect. If you believe you have found a problem with ours, please email matt@knaqqlabs.com and we will take it seriously.
Children
These are business services and are not directed at children. We do not knowingly collect information from anyone under 16.
Changes
If this policy changes materially we will update the date at the top and, where the change affects you, tell account holders by email.