Privacy notice

Last updated 2026-11-02

This notice explains what personal data Keencrest handles, why, for how long, who else processes it, and how you can see, correct or delete it. It covers our client work on Upwork and Fiverr, our email, this guides site, and the data tools we publish on Apify as Data Gleaner.

1. Who we are

Keencrest is a small data business based in Taiwan. It also publishes as Data Gleaner on the Apify Store, and as Tidyleaf for browser extensions and plugins. Keencrest is a trading name, not a company. The person legally responsible for your data (the "controller") is its owner, Alex Lin, a sole trader in Taiwan.

Contact for anything in this notice: datagleaner@gmail.com, subject "Privacy".

2. An AI agent runs our operations

Most of Keencrest's day-to-day work is done by AI agents. Our lead agent, Crest, reads and answers our email and marketplace messages, scopes projects, drafts proposals, and runs and checks deliveries. Builder agents write and test code. They run on Anthropic's Claude models. This means:

• Messages, job posts and files you send us are read by an AI system, and the text goes to Anthropic so the model can process it.
• Every message from us says that it was written by Crest, Keencrest's AI agent.
• Alex Lin owns the business and is accountable for it. On Upwork he confirms every proposal before it is sent and accepts every contract himself.
• We do not make decisions about you by automated means alone that have legal effects on you or affect you similarly significantly. An agent only decides things like whether a job fits our services, or how to word a reply.
• If you want a person to look at something, say so in your message. Alex will review it.

3. What we handle, why, and on what basis

Where the EU or UK GDPR applies, the legal basis for each use is shown in brackets (GDPR article 6(1)).

Clients and prospective clients on Upwork and Fiverr

• What: your name or username, company, and what the platform shows us. We also get the job post or order requirements, the messages you send us, files you give us for the work, and the results we deliver. Payment goes through the platform, so we never see your card or bank details.
• Why: to decide whether we can do the job, write a proposal, carry out and deliver the work, and support you afterwards. We also keep a record of what we did and for whom.
• Basis: steps you asked for before a contract, and then performing the contract (b). For our records and handling disputes, our legitimate interests (f). For tax records, legal obligation (c), or our legitimate interest in complying with Taiwan tax law (f).
• If you don't give us what an order needs, we can't do that order.

Upwork job data received through Upwork's tools

We use job posts only to draft a proposal for that one post. We never use them to train, fine-tune or test an AI model, and we never collect them into a dataset. We record each action our agent takes on Upwork: who directed it, which agent, and the scope. Upwork's terms require this record.

Email to our brand inbox

• What: your email address, name, and whatever you write or attach.
• Why: to answer you and keep a record of the conversation.
• Basis: legitimate interests (f), or steps before a contract (b) if you're asking about buying something.
• We do not currently send cold marketing email. If that changes, we'll update this notice first.

Removal and privacy requests

When you make a request, we record who asked (handle or ID, and your email), what we did, and when. This lets us show we handled it (legal obligation (c), or legitimate interests (f)). See our removal page.

People who use our tools on Apify

When you run a Data Gleaner Actor, the run happens in your own Apify account. Apify does not show us your inputs, results or account details. We see only aggregate figures, such as user and run counts and earnings, plus anything you post in an Actor's Issues tab or send us directly. Apify's own privacy policy covers your account.

People who appear in data our tools or lists return

Our tools and lists work with public business data, such as the contact details a company publishes on its own website. We work to filter out data that reads as personal, for example free-mail addresses and named-officer columns, in markets where the law requires it. If your details appear anyway, or a tool of ours returns your social profile or posts, ask us through the removal page. We'll exclude you from future runs and editions. We cannot delete copies that a buyer or another Apify user already saved; each of them is responsible for their own copy.

Visitors to this site

This site sets no cookies and runs no analytics or advertising scripts of ours. Our hosting provider, Google Firebase Hosting, logs requests, including IP addresses, to serve and protect the site. Google Search Console gives us aggregate search figures and no data about individual visitors. Basis: legitimate interests (f).

Extensions, plugins and add-ons

Each Tidyleaf extension, plugin or add-on has its own privacy policy, linked from its store listing. That policy is the one that applies to it.

4. How long we keep it

• Upwork job posts and data from Upwork's tools: a post we draft a proposal for is saved on our computer until we mark that proposal sent, then deleted; any copy still there after 30 days is deleted. Upwork job-alert emails in our mailbox are moved to Trash after 30 days, and Gmail empties Trash a further 30 days later. Our own proposal record (an ID, the offer, the price, the status, the post's title and link, and the text of our proposal) is kept as a business record.
• Files you send for a Fiverr or Upwork order, and our working copies and deliveries: our procedure and delivery tools keep them in one working folder on our computer, which is deleted 7 days after we mark the order delivered. The automatic deletion covers only that folder. Copies held by Fiverr, Upwork or on your own devices follow their own rules.
• Delivered results and order records (who ordered what, when, for how much): kept as long as tax and accounting law requires, then deleted.
• Messages on Upwork and Fiverr: they stay on the platform under its rules. We keep no separate copy beyond what an order needs.
• Email: kept as a record of the conversation until it is deleted on request. If you ask, we delete it, unless we need it for a legal claim, a platform dispute or tax records. We delete it by hand when we handle your request. Upwork job-alert emails follow the job-post rule above.
• Removal and privacy request records: kept as long as we keep excluding you, so the exclusion keeps working.
• Agent action records for Upwork: kept as long as Upwork's terms require us to be able to produce them.

5. Who else processes it

We don't sell or share your personal data as a client, correspondent or site visitor. These providers process it for us, each under its own terms:

We may also disclose data where the law requires it, or to protect our rights in a dispute.

6. International transfers

We are in Taiwan, and the providers above store data in the United States and other countries. So your data leaves your country, including the EU, UK or Taiwan. Where a provider offers its own transfer safeguards, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework, those apply under its terms. Ask us and we'll tell you which provider uses which safeguard.

7. Your rights and how to use them

You can ask us to:

• tell you whether we hold data about you, and give you a copy;
• correct it;
• delete it;
• restrict or stop using it, or object to a use based on legitimate interests;
• send it to you in a machine-readable format (portability, under GDPR).

Email datagleaner@gmail.com with the subject "Privacy request" and say what you want. To ask us to stop our tools returning your profile or details, use the removal page. If we can't tell that a request comes from you, we may ask one question to check. We don't ask for ID documents.

We reply within 15 days to a request to see or copy your data, and within 30 days to other requests. Where the law lets us extend that, we tell you why before the time runs out. Requests are free.

If you're in the EU or UK, you can complain to your data protection authority. In the UK, that is the Information Commissioner's Office. We'd like the chance to fix things first, though.

8. Taiwan Personal Data Protection Act

For the Taiwan PDPA:

• Collector: Alex Lin, trading as Keencrest.
• Purposes: those in section 3, which cover contract and service management, customer management, and information and data services.
• Data categories: identification and contact details, the content of messages and files, and transaction records.
• Period: as in section 4.
• Area: Taiwan and the countries in section 5.
• Recipients: the providers in section 5.
• Use: by electronic means.

Under article 3 you may:

• inquire into and review your data;
• request a copy;
• supplement or correct it;
• ask us to stop collecting, processing or using it;
• ask us to erase it.

Use the email above. Giving us data is voluntary, but without what an order needs we can't do the order.

9. Children

Our services are for businesses. They are not directed at children, and Upwork and Fiverr accounts are for adults. We don't knowingly handle children's data. If you think we hold some, tell us and we'll delete it.

10. Changes

When this notice changes, we update the date at the top. For a change that affects how we use data we already hold, we also tell the clients concerned before it takes effect.

This notice was drafted by Crest, Keencrest's AI agent. Keencrest is owner-operated.