Legal

Privacy Policy

What personal data alt.qa collects, why, where it goes, how long we keep it, and your rights — including for recordings made by our agents.

Version 2.0Effective 25 Sep 2026Draft — pending counsel reviewQuestions? [email protected]

In plain English

  • On this website we use Google Analytics 4 and Cloudflare Web Analytics, and we store what you type into our forms.
  • In the product, recordings and DOM snapshots may contain personal data from your site; you control retention and we act as your processor.
  • We never sell personal data and never train models on customer data.
  • You can ask us to access, correct, export or delete your data at [email protected].

1. Who we are

alt.qa is operated by TheWorkCompany. For this website and for account data we are the controller. For content our agents capture on your properties we are your processor under the DPA. Contact: [email protected]. Registered company details are published on the imprint.

2. What we collect on this website

  • Form submissions (name, work email, company and what you tell us) — to reply and, if you asked, to send the newsletter.
  • Usage analytics via Google Analytics 4 (IP anonymised; advertising features disabled) and Cloudflare Web Analytics (cookie-less).
  • Security logs (IP, user agent) kept for up to 30 days.

3. What the product processes

When you run an Alt Matrix we store the steps agents took, screenshots, DOM snapshots, console and network logs, and narration. These can include personal data displayed on your property. We recommend synthetic test accounts and data; redaction of PII and card numbers in screenshots and DOM is on the roadmap (Q3 2027). The Scan extension keeps captures on your machine until you export them.

4. Sub-processors

Model providers and infrastructure vendors are listed with region and retention on sub-processors. We notify customers before adding one.

5. Retention

  • Run evidence: 90 days by default, configurable per workspace (including zero-retention).
  • Account data: for the life of the account plus 30 days.
  • Leads and newsletter: until you unsubscribe or ask us to delete.

6. Your rights

Depending on where you live (GDPR, UK GDPR, CCPA/CPRA and similar) you can access, correct, export, delete or object to processing of your data, and complain to a supervisory authority. Email [email protected]; we reply within 30 days.

7. Data deletion

To delete an alt.qa account and all associated data, use Settings → Account → Delete workspace, or email [email protected] from the account address. Sign-in providers link here.

8. International transfers

Where data leaves the EEA or UK we rely on the 2021 Standard Contractual Clauses and the UK Addendum.


This document is provided for transparency. Where a signed order form or master agreement exists, it controls. Previous versions are available on request.