Privacy
Policy.

Last updated: 2 October 2026

The short version

Who is responsible

This website is run by João Queirós, trading as JQ AI SYSTEMS, based in Porto, Portugal. I am the person responsible for your data (the "data controller" under the EU General Data Protection Regulation, GDPR). I handle enquiries personally, with the service providers described below.

Contact: joaojbq@ai.joaoqueiros.com

What I collect, and why

The contact form

Your name, email address and message. I use them to reply to you. Your message is emailed to me, and you receive an automatic confirmation copy at the address you gave.

Project intake forms

If we are discussing or have agreed a project, I may send you a questionnaire (for example the pre-call questionnaire or a project intake form). The answers you give are emailed to me and used to prepare for, or deliver, that work.

Voice messages

If you use the voice message button, I receive your recording together with your name and email address. I listen to every message myself and use it to reply. The recording is emailed to me, and a copy is kept on the website's server for 12 months, after which it is deleted automatically.

Website assistant and consultation booking

The assistant starts with prepared answers from a small, reviewed set of public business information. These answers run in your browser. It has no connection to my private files, vaults, emails, client records or Google Calendar events.

When cloud AI is available, you can choose Enable cloud AI answers. Each question you then submit is sent to Cloudflare Workers AI together with relevant public facts. Cloudflare Turnstile processes technical browser information to prevent abuse. Please do not enter passwords, sensitive personal information or confidential client material. You can turn AI off at any time and continue with prepared answers.

This application does not save chat transcripts or use them for training. The visible conversation stays in this page's memory until you clear it, reload or leave. The backend keeps daily salted identifiers derived from IP addresses and usage counters to enforce limits; these expire at the daily reset, normally within 24 hours. Cloudflare still processes requests and technical data to operate its services. Read Cloudflare's AI data policy and privacy policy.

Cal.com loads only when you open a booking link or choose to load its calendar. It processes the contact details and booking information you provide. If you book, the appointment is handled by Cal.com and the connected calendar provider. The assistant receives no private event details and cannot confirm, change or cancel appointments. See Cal.com's privacy policy. Booking records are kept as needed to handle your consultation and any work that follows; you can ask me to delete them.

Technical details sent with a form or voice message

When you send any of the above, the notification I receive also includes your IP address and the page you sent it from. I use these only to spot spam and abuse.

Separately, the server keeps a short activity log so I can tell whether a message was delivered. That log never contains your name, email address or IP address in readable form: your email is stored only as a scrambled one-way code (a hash), and IP addresses used for spam limits are scrambled the same way.

The Builder Digest (email newsletter)

All my skills, posts and free tools are available without giving an email address. If you would like The Builder Digest, my newsletter, you can leave your email address. Here is what happens:

• I send you one email with a link to confirm you really asked for this. Nothing else happens until you click it, and if you never do, your address is deleted after 7 days.
• Once confirmed, I keep your email address, the date you signed up and confirmed, which emails you chose, and the exact wording you agreed to, so I can show you asked.
• The Builder Digest arrives about once a week: the AI tools, news, prompts and free skills I found worth knowing, plus occasional news about my own work and services. I never share your address.
• People who signed up for new-skill alerts before the digest existed keep getting only those, unless they choose to join the digest.
• Every email includes a link to unsubscribe. Unsubscribing deletes your address.
• Links in the newsletter to this website carry a label (for example utm_source=newsletter) so Google Analytics can count visits that came from the newsletter. It does not identify you.

Website analytics (cookies)

The site uses Google Analytics 4, provided by Google, to measure how many people visit, which pages they read and roughly where they are (country or city level, from the IP address). Google Analytics sets cookies in your browser to do this. I use the results only to understand which pages are useful.

You can block these cookies in your browser's settings, or install Google's own Analytics opt-out browser add-on. The site works normally without them.

Legal basis

• Replying to your enquiry, voice message or questionnaire: taking steps you have asked for before we might work together, and my legitimate interest in answering people who contact me.
• Spam and abuse prevention (IP address, scrambled logs): my legitimate interest in keeping the site working and secure.
• The Builder Digest and new-skill alerts: your consent, given when you sign up and confirm by email. You can withdraw it at any time by unsubscribing.
• Analytics: my legitimate interest in understanding how the site is used.

Who else receives your data

The website uses these service providers:

• The hosting provider that operates the server this website runs on. Form submissions, voice recordings and newsletter sign-ups are processed and stored on that server, and the site's emails are sent through it. The server is located in Dallas, Texas, in the United States.
• Google, for Google Analytics, as described above.
• Cloudflare, if you enable cloud AI answers, for question processing and abuse prevention.
• Cal.com and the connected calendar provider, if you use consultation booking.

I do not sell your data, share it with advertisers, or use it to build profiles.

Data stored outside the EU

Optional AI and booking services may process data internationally under their published policies. The assistant is not configured as an EU-only processing service.

Because the website's server is in the United States, the data you send through this site is transferred to and stored in the United States. Google may also process analytics data there. If you would prefer not to send your data through the website, you can email me directly at joaojbq@ai.joaoqueiros.com instead.

How long I keep it

Your rights

Under the GDPR you can ask me to:

• tell you what data I hold about you and give you a copy;
• correct anything that is wrong;
• delete your data;
• restrict or object to how I use it;
• give you your data in a portable format;
• withdraw your consent to emails about new skills, at any time.

Email joaojbq@ai.joaoqueiros.com and I will respond within one month. If you are unhappy with how I handle your data, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or to the authority in the country where you live.

Children

This website is aimed at businesses and professionals, not at children, and I do not knowingly collect data from anyone under 16.

Changes to this policy

If what the site collects or how it is kept changes, I will update this page and the "last updated" date above.