Privacy policy (draft)

Draft Agentuna privacy policy written with PDPL in mind, pending legal review.

Who we are

Agentuna ("we") runs this website and decides why and how the personal data described here is used. For any privacy question or request, contact us via the form at /en/advertise/#inquiry.

What we collect

Newsletter: your email address and the date you gave consent. Purchases and sponsor bookings: the order details Lemon Squeezy passes to us, or what you write when you book by email. Submit-a-problem form: the problem text, and optionally your email and city. Cookie-free analytics: Vercel Web Analytics (aggregate page views, referrers, country, device type) and Vercel Speed Insights (page-load performance). They set no cookies and do not track you across sites; Vercel derives visitor counts from a daily-rotating hash that is not stored with your IP. Form security: we keep a salted, one-way hash of your IP address (never the IP itself) for up to 1 hour to stop spam and abuse. We do not collect national ID numbers, health or financial data.

Why and on what basis

We process data only with your consent (PDPL) to send the newsletter you asked for, and to improve rankings from submitted problems. You can withdraw consent at any time; withdrawal does not affect processing before it.

Social media trend data

Our "Trending problems" pages use aggregate post counts and phrases from public social media via official APIs. We store no handles, user IDs or profiles, and raw posts are deleted within 7 days.

Sharing and transfers

We do not sell personal data. Processors: Vercel Inc. (USA) for hosting, serverless functions, analytics and storage. Form submissions are stored in a private Vercel Blob store located in the Dubai (UAE) region. Resend (USA) sends our newsletter emails and receives your email address for that purpose only. Lemon Squeezy (USA) runs checkout for paid packs and sponsorships as the merchant of record: it collects your payment and billing details under its own privacy policy, and we receive only the order details (name, email, product and amount); we never see your card number. Some processors are abroad; transfers will follow the PDPL transfer regulations and their safeguards.

Retention

Newsletter emails: until you unsubscribe, then deleted within 30 days. Submitted problems: up to 12 months, then anonymised. Server logs: up to 30 days. IP hashes for rate limiting: up to 1 hour. Done-for-you inquiries: up to 24 months.

Your rights

Under the PDPL you can ask to be informed, to access, to obtain a copy, to correct, and to delete your personal data, and to withdraw consent. Every newsletter email has an unsubscribe link and a "delete my data" link that work instantly. For anything else, contact us via the form at /en/advertise/#inquiry. We aim to reply within 30 days. You can also complain to the Data & AI Authority (SDAIA).

Security and breaches

We use HTTPS and keep the data we hold to a minimum. If a breach affects your data we will notify the competent authority and, where required, you.

Children

This site is not directed to children under 18 and we do not knowingly collect their data.

Changes

We will post changes here with a new date. Last updated: 2026-10-17 (draft v3: named email and payment processors, contact email).