This notice covers the public, non-logged-in pages at aqueductlabs.com, including the request page. Last updated 5 September 2026.
Aqueduct Labs is responsible for the processing described here. Write to [email protected] with any question about it.
What you submit. When you run a request on one of these public pages, without being logged in, we store it: what you entered, what the site returned, and when. The same goes for the contact form, which also carries the details you give us, such as your name, email, and firm.
Technical information. A pseudonymous visitor identifier and a coarse location, described below.
The identifier is a salted one-way hash of your IP address and browser user-agent. The location is country, plus region and city where our network provider supplies them. We do not store your IP address, and we do not put cookies or any other storage on your device for analytics.
For visitors in the EU, EEA, UK, and Switzerland the identifier includes the date, so it changes every day and cannot be used to recognise you tomorrow. Elsewhere it is stable until we rotate the secret behind it, which we do periodically.
To run and improve the service: to tell whether it is working, to diagnose failures, to enforce the rate limits that keep these pages available, and to reply when you contact us. Our lawful basis is legitimate interest in operating and improving our own service. We do not sell or share this data, we do not use it for advertising, and we do not combine it with data from other sites.
Submissions and page-view records are deleted after 12 months. That deletion runs on a schedule rather than on request, so it happens whether or not anyone asks. Contact-form details are kept while we are in touch with you about your enquiry, and deleted when that ends.
One exception, and it is the honest one: if what you sent becomes part of a business relationship with us — a contract you go on to discuss or enter — financial regulation requires us to keep that correspondence for several years after the relationship ends, and it is held under that obligation instead of being deleted at 12 months. This applies to records that are part of a customer relationship, not to ordinary page views, and not to a request from someone we never do business with.
Write to [email protected] to ask what we hold about you, to have it deleted, or to object to this processing. One honest limit: because we never store your IP address, we usually cannot connect a record to you unless you also used the contact form or can tell us roughly when and from where you visited. That is a consequence of collecting less, and we will help you as far as the records allow.
If you are in the EU, EEA, UK, or Switzerland, you can also ask for a copy of your data, ask us to correct or restrict it, and object to processing we do on the legitimate-interest basis described above. You have the right to complain to your national data protection authority — in the UK the Information Commissioner’s Office, elsewhere your member state’s supervisory authority — and you do not have to raise it with us first, though we would rather you did so we can fix it.
If you are a California resident, you have the right to know what we collect and why, to have it deleted, to correct it, and not to be treated differently for exercising any of those. We do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is nothing here to opt out of and no global privacy control signal for us to honour. Use the address above for any of these requests. Residents of other US states with comparable laws have the same rights on the same terms.
Our infrastructure providers process this data on our behalf: Google Cloud (hosting), Neon (database), Cloudflare (network and protection), Anthropic (the model behind the search), and Resend (email we send in reply). They act on our instructions and do not use it for their own purposes.
These providers are in the United States, so data about visitors in the EU, EEA, UK, and Switzerland is transferred there. Those transfers rely on the European Commission’s standard contractual clauses, and the UK addendum where the UK regime applies.
The request page is a demonstration. Nothing on it is an offer to trade, a price, or a recommendation, and no structure shown is advice to enter it.