Privacy notice — handsfor.ai
Version: 0.1 draft for soft-launch Law: UK GDPR and Data Protection Act 2018 Language: British English
Trader: Stephen Meek. Address: 41 Park Way, Rogerstone, Newport NP10 9NQ. Contact: info@handsfor.ai. Website: https://handsfor.ai.
This notice explains how Stephen Meek (“we”) uses personal data when you use handsfor.ai.
1. Controller
Stephen Meek, 41 Park Way, Rogerstone, Newport NP10 9NQ. Privacy contact: info@handsfor.ai.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Principal identity / contact | Name, email, organisation, role | You |
| Agent metadata | Agent name/id, callback URLs you provide | You / your systems |
| Job content | Task description, URLs, screenshots, phone numbers you supply, outcomes | You |
| Authority attestation | Confirmation you own/administer the target system | You |
| Payment | Fiat provider refs; BTC tx id / amount; timestamps | You / payment rails |
| Technical | IP address, browser/agent logs, security logs | Systems |
| Refusal logs | Job summary + reason refused (fraud/AUP prevention) | Us |
Avoid sending special-category data (health, biometrics, etc.) unless strictly necessary for a lawful job you control.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Take payment and perform the job | Contract |
| Verify authority / refuse prohibited jobs | Legitimate interests (legal compliance, security) / legal obligation where applicable |
| Customer support and disputes | Contract / legitimate interests |
| Tax and accounting records | Legal obligation |
| Improve service using aggregated stats where possible | Legitimate interests |
| Detect fraud and abuse | Legitimate interests |
We do not sell your personal data. We do not use job content for unrelated marketing without a lawful basis and, where required, consent.
4. Sharing
Processors / platforms may include: website host, email, fiat payment provider (e.g. Stripe), analytics if enabled, and (if you pay in Bitcoin) public blockchain data inherent to the network.
International transfers use appropriate safeguards where required (e.g. UK IDTA / SCCs).
We may disclose information to law enforcement where required or permitted by law.
5. Retention (MVP defaults — adjust if needed)
| Record | Retention |
|---|---|
| Job content / screenshots / chat | 90 days after job closed, then delete or anonymise (unless dispute or legal hold) |
| Authority attestations | 12 months after job |
| Refusal / abuse logs | up to 24 months |
| Payment / invoice records | up to 6 years (tax) |
| BTC txids on public chain | permanent on-chain (outside our control); our internal mapping kept with payment records |
6. Security
Access limited to people who need it to deliver or review jobs. Prefer least-privilege tools; no public posting of raw task dumps.
7. Your rights
You may request access, rectification, erasure, restriction, objection, or portability where applicable. Contact info@handsfor.ai. You may complain to the ICO (ico.org.uk).
8. Children
Services are for adults / businesses. We do not knowingly take jobs from under-18s as Principals.
9. Changes
Updated versions will be posted on https://handsfor.ai. Material changes highlighted where practical.