Privacy& data.
Updated: August 2026
This is a plain-language overview of what data the site collects, why, how long it's kept and what rights you have. Written so a business owner understands it, not just a lawyer.
- I collect very little on the site, in anonymous aggregated form.
- I never sell your data.
- AI vendors don't train models on your data.
- Anything I hold about you, you can ask me to delete.
Controller and contact
This website is operated by Jakub Jamný, business ID (IČO) 09905367, registered office Sudoměřice 440, 696 66 Sudoměřice, Czech Republic, as a self-employed individual on the Czech trade register. On data protection matters you can reach me at the email below and I answer personally, there's no department between us.
Depending on the situation I act in two different roles, and it's honest to separate them, because they differ in who is responsible for the data.
As the website operator I'm the controller
For the data of this site's visitors I decide the purpose and scope of processing myself, so I'm the controller. This covers analytics, contact by email and newsletter sign-ups.
Running a Managed Loop I'm the processor
When I run a loop for you, I process personal data on your instructions. You are the controller, I'm the processor, and the whole thing is governed by a data processing agreement (DPA). I don't decide what the data is used for, I only do what we agree on.
An overview of what the site and the work actually process. Treat the lawful bases and periods as a default frame to confirm against your real practice.
| Category | What | Why | Lawful basis | Retention |
|---|---|---|---|---|
| Website analytics | Anonymous aggregated signals such as page views, referrers and load timings | See which parts of the site are useful and how fast they load | Legitimate interest in running and improving the site | Aggregated, without identifying an individual |
| Contact & email | Email address and message content, or details from the newsletter form | Answer a question or send updates you asked for | Legitimate interest for a query, your consent for the newsletter | Until handled, then only as long as it makes sense, or until consent is withdrawn |
| Client operational data | Data a running loop works with, such as contacts, orders or invoices | Do the work you run the loop for | Processing on the controller's instructions under a DPA | For the duration of the engagement, access is removed at the end |
A few services take part in running the site and the loops. Here's what they're for, what data they see and whether they train models on it.
| Subprocessor | Purpose | What data it sees | Location | Trains on data? | DPA |
|---|---|---|---|---|---|
| Vercel | Hosting the site and automations | Operational data passing through the site and loop | EU / US | No | Yes |
| Anthropic (Claude) | AI judgment inside loops | Content you send into the loop | US | No (commercial terms) | Yes |
| Railway (n8n) | Running loop workflows | Data the workflow processes | EU / US | No | Yes |
| HubSpot | CRM | Contacts and deals | EU / US | No | Yes |
| Brevo | Newsletter delivery | Subscriber email address | EU | No | Yes |
| Fakturoid | Invoicing | Invoices and client details | EU | No | Yes |
Only as long as it makes sense
I don't keep personal data longer than needed for the purpose I obtained it for. Analytics runs in anonymous aggregated form, emails and correspondence I keep until handled and then only for the necessary time, and client operational data I process for the duration of the engagement, with access removed at the end. I'm happy to specify exact periods for your case.
Under GDPR you have a range of rights over your personal data and can exercise them at any time.
Access to the data I process about you.
Rectification of inaccurate data.
Erasure of data, the right to be forgotten.
Restriction of processing.
Objection to processing.
Portability of your data to another controller.
Withdrawal of consent where processing is based on consent.
Send a request to the email below and I'll handle it without undue delay. Where it concerns data from a running loop, where the client is the controller, direct the request to that client and I'll assist as the processor.
If you feel I'm handling your data wrongly, you have the right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ), the supervisory authority in the Czech Republic.
Some subprocessors are US-based
Part of the chain is based in the United States, so personal data may be transferred outside the EU. Where that happens, I rely on Standard Contractual Clauses (SCCs) and data processing agreements with those vendors as the safeguard for an adequate level of protection. I'm happy to document the specific mechanism for each service.
No tracking cookies
The site sets no tracking or advertising cookies and analytics runs without cookies. That's why there's no cookie banner to click through. I don't build advertising profiles or track individuals across sites.
DPA on request
When you work with me as a loop provider, I provide a data processing agreement (DPA) on request and I'm happy to go through your company's specific requirements. The security side of the operation is described on the security page.
When the text changes
I update this document occasionally when tools or practices change. The date of the last update is at the top and bottom of the page. A material change is marked by a new date.
Updated: August 2026
Note for the owner. This text is an honest working basis, not a final legal document. Before final sign-off, have a lawyer review it and fill in the concrete retention periods and lawful bases to match your real practice.