⚠️ Draft — pending legal review. This document is not yet a binding privacy policy.

Privacy Policy

Last updated: March 2026

1. Data Controller

RingiWorks BV, registered in the Netherlands, is the data controller for personal data processed through this platform. Contact: hello@ringiworks.com.

2. What We Collect

  • Account data: Name, email address, company name, KVK/BTW numbers (provided at registration).
  • Process data: Anonymised process descriptions, variables, and performance metrics uploaded by you.
  • Usage analytics: Pages visited, features used, session duration — collected to improve the platform.

3. Legal Basis

  • Contract performance (Art. 6(1)(b) GDPR): Processing your account and process data to deliver the service.
  • Legitimate interest (Art. 6(1)(f) GDPR): Usage analytics to improve the platform, fraud prevention.
  • Consent (Art. 6(1)(a) GDPR): Marketing communications (opt-in only).

4. Data Retention

  • Account data: Retained while your account is active, plus 1 year after account closure.
  • Process data: Retained per your customer agreement. You may request deletion at any time.
  • Usage analytics: Aggregated and anonymised after 90 days.

5. Third Parties

We share data with the following processors, all operating within the EU or under adequate safeguards:

  • Stripe (Dublin, Ireland) — Payment processing.
  • Vercel (EU edge network) — Application hosting.
  • Supabase (EU region, AWS Frankfurt) — Database hosting.

6. Your Rights

Under GDPR, you have the right to:

  • Access — Request a copy of your personal data.
  • Rectification — Correct inaccurate data.
  • Erasure — Request deletion of your data (“right to be forgotten”).
  • Data portability — Receive your data in a structured, machine-readable format.
  • Object — Object to processing based on legitimate interest.
  • Withdraw consent — Where processing is based on consent.

To exercise any of these rights, email hello@ringiworks.com. We will respond within 30 days.

7. Data Protection Officer

Our DPO can be reached at hello@ringiworks.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Cookies

We use only essential session cookies (NextAuth.js) to maintain your login state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.