Privacy policy
This text is a working draft. The version that governs your contract is the version in your order form or in the checkout flow at the time of purchase.
Who we are
Afiant B.V. of Amsterdam — controller for marketing-website data; processor for the customer data submitted to the platform under the DPA.
What we collect
Account email, organisation name, billing details (via Stripe), the files you upload, and product-usage telemetry on your own actions in the app.
Why we collect it
To produce reports, to send them to you, to operate the service you bought, and to comply with legal obligations (Chamber of Commerce, GDPR, billing).
Where we store it
Inside the European Union. Supabase EU region for primary data. Backblaze EU region for archive (paid plans). No customer data leaves the EU without explicit consent.
Subprocessors
Stripe (payments), Resend (transactional email), Supabase (database + storage), Backblaze (archive — paid plans), Anthropic (AI matching, EU endpoint where available). Full list with regions in the DPA.
Your rights
Access, rectification, erasure, restriction, objection, portability — under GDPR articles 15-21. Exercise via privacy@afiant.com, processed within one month.