How SkynetLabs handles your data
Plain-language privacy policy for the website at skynetjoe.com and any consulting engagement run by Waseem Nasir. Written to be lawyer-readable but founder-friendly.
1. Who we are
SkynetLabs is the operating name of the sole-proprietor consulting practice run by Waseem Nasir, based in Bali, Indonesia. We build AI automation, websites, and content systems for clients across nine countries.
If you need to reach a human about any data question, email info@skynetjoe.com. That inbox is read every weekday.
2. What we collect
We try to collect the smallest amount of data needed to actually reply to you and ship the work.
- Site visit data — an anonymous, cookieless funnel counter we run ourselves. On page load, booking-link clicks and completed bookings, the browser sends the site name, event name, page path (no query string), referring domain, booking step and (on a click) the address of the booking link you clicked to our own self-hosted n8n server. No cookies, no local storage, no user or device identifier; it stays silent if your browser sends Do-Not-Track or Global Privacy Control. Like any web request, the receiving server sees your IP address in transit; it is not written to the events table. The same n8n server separately receives lead details (name, email, phone) from the forms above so we can respond quickly — that is a lead alert, not part of the anonymous counter.
- Advertising measurement — the Meta Pixel loads on every page and sets Meta cookies, governed by Meta's privacy terms. Google Analytics / Tag Manager are not loaded on this site today.
- Lead forms and tool email gates — when you enter an email to unlock a free tool result or submit a lead form, that email (plus the tool you used) is sent to our CRM so we can follow up, and the tool remembers it in your browser so you are not asked twice. When the Meta Conversions API integration is switched on, a hashed (SHA-256) copy of that email plus browser identifiers is also sent to Meta server-side so ad results can be matched to enquiries.
- Contact form submissions — name, email, and the project brief you send through the form on /contact. Nothing else is required.
- Discovery brief (/discovery-call) — first and last name, email, phone/WhatsApp, company, website, role, current tool stack, how you heard about us, budget range, timeline and the problem you describe. It goes to our CRM, to an internal notification email, and to our self-hosted n8n server so we get paged when a lead lands.
- Tool feedback — the message you type into a free tool's feedback box and, if you add it, your email; forwarded to our internal Slack so we can reply, and — if you gave an email — that email is also saved to our CRM as a contact tagged with the tool name so we can follow up.
- Email correspondence — anything you email to us is stored in Google Workspace inside our mailbox.
- Newsletter signups — there is no newsletter form on the site today; if one is added, it will collect only your email address and this section will say so.
3. Why we collect it
- To reply to inbound work briefs and questions.
- To ship the project you've engaged us for.
- To send invoices and accept payment.
- To send the newsletter, if you've opted in.
We do not sell, rent, or trade your data. We never have.
4. Who we share it with
The small number of third-party services we rely on to run the business:
- Stripe — payment processing for clients who pay by card. Stripe sees the transaction data needed to settle the payment.
- Wise — international bank transfers for clients who prefer wire payment. Wise sees the transfer details.
- Google Workspace — for email correspondence with clients and inbound briefs.
- Hostinger — hosts skynetjoe.com and our self-hosted n8n server, which receives the anonymous funnel counts and the lead alerts (name, email, phone) described in section 2.
- Meta Platforms — receives Meta Pixel events for advertising measurement.
- GoHighLevel — our CRM; receives whatever you enter on a lead form, a tool email gate, a tool feedback box or the discovery brief (name, email, phone/WhatsApp, company, website, role, current tool stack, how you heard about us, your brief, and which form or tool it came from) so we can follow up.
- Resend — transactional email service; sends us an internal notification email carrying the same lead details at the same time as the CRM write, so a lead is never lost if one path fails.
- Slack — receives tool-feedback messages and the optional email you attach to them.
- Calendly — runs the call booking on /discovery-call and the landing pages; when you book, your name, email, time zone and any answers you type go to Calendly under its own privacy terms, and its webhook tells us a booking happened.
- GitHub — source code storage. No client business data lives here unless a client has explicitly asked us to host their repo for them.
Beyond the services listed here, we do not share your data with any other third party without your explicit written consent.
5. How long we keep it
- Active client records — kept indefinitely while the engagement is live, then for 7 years after engagement close (Indonesian tax record requirement).
- Inbound briefs that don't become clients — deleted after 90 days.
- Newsletter list — kept until you unsubscribe. One-click unsubscribe link is in every email.
- Anonymous funnel counts — aggregate rows only, no identifiers; we can't tie them back to a person. Meta Pixel data is retained under Meta's own policy.
6. Your rights
You can request any of the following by emailing info@skynetjoe.com with the subject line "Data request":
- A copy of every piece of data we hold on you.
- Deletion of your data (subject to the tax-record retention rule above).
- Correction of any data you believe is inaccurate.
- Export of your data in a portable format.
We respond to data requests within 14 days. No charges, no friction, no "we'll get back to you" loop.
7. Cookies
What this site stores in your browser:
- localStorage (browser-side store, never read by the funnel counter): the free tools keep your in-progress answers and the results you generate so a refresh does not lose them; if you unlocked a tool with your email, that email is remembered so you are not asked again (the same email was already sent to our CRM when you entered it); the call qualifier on /discovery-call keeps your answers the same way; and small dismissal flags remember that you closed the announcement bar, the exit prompt or the sticky book-a-call bar.
- sessionStorage (cleared when the tab closes): flags that stop pop-ups, the chat bubble and article-view counters from repeating within one visit. Nothing identifying.
- The Meta Pixel sets Meta's advertising cookies (e.g.
_fbp) so ad performance can be measured. Our own funnel counter sets nothing. Calendly's booking embed on /discovery-call and the landing pages sets its own cookies, under Calendly's terms.
We do not currently show a cookie consent banner. Because the Meta Pixel sets advertising cookies (and Calendly sets its own on the booking pages), EU/UK visitors may be entitled to be asked first; a consent gate is under evaluation. Until it ships you can block the pixel with any tracker-blocking browser or extension, and our own counter already honours Do-Not-Track / Global Privacy Control.
8. Data location
The infrastructure we use is hosted in the United States and the European Union:
- Hostinger — website hosting (EU data center) and our self-hosted n8n server (Contabo/Hostinger VPS, EU) that receives the anonymous funnel counts and lead alerts.
- Meta Platforms — US (Pixel and Conversions API data).
- Calendly — US (booking details).
- GoHighLevel — US (CRM contact records).
- Resend — US (internal lead-notification emails).
- Slack — US (tool-feedback messages).
- Google Workspace — US and EU data centers.
- GitHub — US data centers.
- Stripe — US and EU.
- Wise — UK and EU.
No client data is stored on servers located inside Indonesia. We operate from Bali but our infrastructure is not in Indonesia.
9. Children's data
This service is not directed at people under the age of 18. We do not knowingly collect data from children. If you believe a child has submitted data to us, email info@skynetjoe.com and we'll remove it immediately.
10. Changes to this policy
Last updated 2026-09-01.
If we make material changes to how we handle your data, active clients and newsletter subscribers will receive an email notice. The "last updated" date at the top of this page always reflects the most recent revision. Minor wording changes are made silently.
Quick read: we collect the bare minimum, we don't sell anything, we delete on request, and the only third-party advertising tracker is the Meta Pixel, disclosed above; Calendly sets its own cookies where the booking embed appears.
Questions about your data?
Email info@skynetjoe.com or send a note via the contact form.
Open contact form