LEGAL

Privacy Policy

This policy covers the personal information used to run our website, subscriptions, training and support. Your use of third-party AI platforms is also subject to their own privacy policies.

Last updated 25 September 2026.

This explains what personal data myQS AI collects, why, how it's used, and what rights you have over it. It applies to visitors to this website, demo bookings, Setup clients, and Skill Library subscribers.

The data controller is James Ball trading as myQS AI, a sole trader, at 43 Byron Road, Addlestone, KT15 2SJ. For anything in this policy, contact Email us.

1. What we collect

We only collect what's needed to run the business relationship with you:

  • Contact details — name, email address, and phone/WhatsApp number, given when you book a demo, buy The Setup, or subscribe to the Skill Library.
  • Payment and subscription records — held by Stripe on our behalf when you subscribe to the Skill Library or pay a Setup invoice. We don't see or store your card details ourselves; Stripe handles that.
  • Support messages — anything you send us over WhatsApp or email while getting support, kept as part of our normal message history.
  • Purchase confirmation — your name, business name, acceptance timestamp and Terms version are recorded on Netlify before redirecting you to Stripe, with a reference passed to checkout to help link the confirmation to the purchase. We use these records to administer and evidence the business contract (legitimate interests).
  • Member sign-in — we email you a single-use link valid for 15 minutes. After you confirm sign-in, an essential, secure cookie remembers your session for up to 30 days. We check Stripe again when you access the member library or download a file. Temporary login records and hashed request-limit identifiers are held on Netlify and expired records are removed by a daily cleanup.
  • Website analytics — if you choose “Accept analytics”, Google Analytics receives information about pages viewed, approximate location, device and browser, and interactions such as outbound or contact-link clicks. Google sets analytics identifiers and cookies to distinguish visits. We do not send your name, email address, project documents or member sign-in details to Google Analytics.

We use an essential sign-in cookie for the Skill Library. Optional Google Analytics cookies are used only after you consent. We do not use advertising cookies. You can reject analytics and still use the whole website, or change your choice at any time through “Cookie settings” in the footer. Your choice is stored in your browser; Google Analytics cookies may remain for up to two years unless you withdraw consent or clear them sooner.

2. Your project documents and third-party AI

The Skill Library does not upload, receive or host customer project documents or AI conversations. You download .md instructions, guides and supporting packages, then run them in your own ChatGPT, Claude or other supported account or on your device. Your AI provider processes information you give it under its own terms and privacy settings. Downloading a skill does not give us access to that environment.

If you show us information during training or send documents, screenshots or messages for support, we may see or receive it. This is separate from running a skill. Send only necessary, authorised information and redact personal or confidential content. We use information received for the requested support and do not use it to operate an AI project-analysis service.

3. Why we use it, and the legal basis

  • Running the contract with you — booking a demo, delivering The Setup, providing Skill Library access, invoicing, and giving support. Legal basis: performance of a contract or pre-contract steps where you are the customer; legitimate interests in administering the business relationship where you are a contact for a corporate customer.
  • Payment processing — via Stripe, for Skill Library subscriptions and Setup invoices. Legal basis: performance of a contract with you, or legitimate interests in administering payments for a corporate customer. Tax and accounting records are also processed to meet legal obligations.
  • Responding to support requests — over WhatsApp or email. Legal basis: performance of a contract / legitimate interest in supporting our clients.
  • Security and access — preventing abuse, verifying subscription status and protecting login sessions. Legal basis: legitimate interests in operating a secure member service.
  • Keeping in touch about the service — e.g. telling existing Skill Library subscribers about a material change to these terms, or a new skill being added. Legal basis: legitimate interest, kept relevant and infrequent. We don't send marketing emails you haven't asked for.
  • Understanding website use — measuring visits and which pages or contact links are useful so we can improve the website. Legal basis: your consent. Analytics stays off until you accept it, and you can withdraw consent at any time.

4. Who we share it with

  • Stripe — processes payments and holds your payment/subscription records. See Stripe's own privacy policy for how they handle your data.
  • Netlify — hosts this website, its functions and temporary login records; ordinary web server logs (like IP address and request time) pass through their infrastructure as with any website.
  • Google Analytics — processes optional website usage information after you consent. Google may receive online identifiers, device information and your truncated or approximate location. We have disabled advertising consent in our tag setup.
  • Resend — delivers login links, welcome emails and member updates to your email address.
  • WhatsApp/Meta — if you contact us over WhatsApp, that conversation is subject to WhatsApp's own privacy policy as well as this one. Joining the optional member group makes your phone number, profile details and posts visible to other participants according to your settings. Do not post confidential project or client information.

We don't sell your data, and we don't share it with anyone else for their own marketing purposes.

5. International transfers

Our providers, including Stripe, Netlify, Resend, Google Analytics and WhatsApp/Meta, may process information outside the UK. Where our use involves a restricted transfer, applicable UK transfer requirements must be met, for example through UK adequacy regulations or appropriate contractual safeguards such as the UK International Data Transfer Agreement or Addendum. Contact us for details or a copy of the safeguards relevant to your information. Your separately chosen AI provider is responsible for explaining its own processing and international transfers.

6. How long we keep it

  • Contact and support records: for as long as you're an active client, and for a reasonable period afterwards in case you get back in touch or for our own accounting/tax records.
  • Payment and invoicing records: for the applicable statutory tax-record period (for sole-trader Self Assessment records, normally at least 5 years after the relevant 31 January submission deadline), or longer where a tax enquiry or legal claim requires it. Purchase-confirmation records: while needed to evidence the agreement and resolve disputes, normally up to 6 years after the contractual relationship ends. We review retention and do not retain information indefinitely without a reason.
  • The sign-in cookie expires after 30 days or is cleared when you sign out. Login links expire after 15 minutes; expired temporary login and request-limit records are removed by the daily cleanup.

7. Your rights

Under UK GDPR, subject to the applicable conditions and exemptions, you can ask us to:

  • tell you what personal data we hold about you;
  • correct anything that's wrong;
  • delete your data, where we're not required to keep it (e.g. for tax records);
  • restrict or object to how we use it;
  • give you a copy in a portable format.

To exercise any of these, email Email us. You can also complain to the Information Commissioner's Office if you think we've got something wrong, though we'd appreciate the chance to sort it out directly first.

You have the right to object to processing based on legitimate interests and to direct marketing. Where we rely on consent, you may withdraw it at any time without affecting prior lawful processing. You do not have to contact us before complaining to the ICO.

We need contact, payment and sign-in information to provide paid access and support; without it we may be unable to supply those services. Access checks use subscription status automatically. If access is wrongly denied, contact us for human review. We do not use AI project outputs to make decisions about you.

8. Security

We take reasonable steps to keep your data secure — payment data is handled entirely by Stripe rather than us, and access to our own systems (email, Netlify, Stripe dashboard) is protected by account-level security. No system is completely risk-free, and the records we process are described in this policy.

9. Changes to this policy

We may update this policy from time to time, for example if we start using a new tool or service. We'll update the date at the top when we do, and tell existing Skill Library subscribers if a change is material.

10. Contact

Questions about this policy, or to exercise any of the rights in section 7: Email us.