Privacy Policy
Last updated: 16 October 2026
Procura Dynamics ("Unstale", "we") runs unstale.dev. This policy explains what we collect, why, who we share it with, and your rights. Questions: hello@unstale.dev.
What we collect
| What | When | Why | Legal basis (POPIA, GDPR) |
|---|---|---|---|
| Email, repository link, stack and version details, notes | You request a scan | To scan your code and send the report | Steps before a contract |
| Billing name, address, tax ID (card details go to PayPal; we never see them) | You order | To take payment and keep tax records | Contract; legal obligation |
| Source code and repository contents | You give us access | To perform the scan and upgrade | Contract |
| Emails and messages with us | You contact us | To answer and keep a record of the order | Contract; legitimate interest |
| Server logs: IP address, browser, pages requested | You visit the site | To run the site and keep it secure | Legitimate interest |
We don't sell personal data and we don't use it for advertising.
Your code
- Use. We use your code only to scan and upgrade it, and to fix problems during the 30-day fix period.
- No training. We never use your code to train AI models. Our AI provider processes it under commercial terms that don't allow training on it.
- Retention. We delete our copies of your code 60 days after delivery (or after the scan, if you don't order), unless you're on Keep Current or ask us to keep it longer. Order records (not code) are kept as tax law requires.
- Personal data inside code. If your repository contains personal data, such as seed files or fixtures, we process it only as part of the upgrade, on your instructions. A Data Processing Agreement is available on request.
Who we share data with
Only service providers that help us run the service, each under a contract that limits use to providing that service:
| Provider | What for | Data |
|---|---|---|
| Anthropic | AI that performs the scan and upgrade | Source code, scan details |
| GitHub | Code hosting and pull requests | Source code |
| Hostinger | Website hosting | Server logs |
| Web3Forms | Receiving scan requests from the website form | Scan request details |
| Google Fonts | Serving the site's typefaces | IP address, browser |
| PayPal | Payments and invoices | Billing details |
| Email provider | Receiving scan requests, sending reports and replies | Email address, messages |
Some providers are in the United States. Where data leaves South Africa, the UK or the EU, we rely on the providers' safeguards, such as Standard Contractual Clauses, as the Protection of Personal Information Act (POPIA) and the GDPR require.
We may disclose data if the law requires it.
How long we keep it
- Scan requests that don't become orders: 12 months, then deleted.
- Customer and order records: as long as tax and accounting law requires.
- Source code: see "Your code" above.
Your rights
Depending on where you live, you can ask to see, correct, delete or export your personal data, object to or limit how we use it, and withdraw consent. Email hello@unstale.dev and we'll reply within 30 days. You can also complain to a data protection authority: in South Africa, the Information Regulator; in the UK or EU, your local authority.
Cookies
The site doesn't set advertising or tracking cookies, and doesn't use analytics. If that changes, we'll update this policy and ask for consent where the law requires it.
Security
Access to customer code is limited to the systems doing the work. We ask for read-only or single-repository access where possible, and we never ask for production credentials. Please tell us at hello@unstale.dev if you find a security problem.
Changes
We'll post changes here and update the date at the top. If a change materially affects how we use your data, we'll email current customers first.