Privacy Policy

User Provided Information

The Application collects the information you provide when you register and use the Application. Registration is not mandatory, but certain features may be unavailable without it. We collect:

• Name
• Email address
• Login credentials
• Payment details (e.g., credit card information, billing address)
• Chat messages (if you contact customer support)
• Conversation data (for text-to-speech and speech-to-text features)
• Any data submitted through forms or user input within the Application (e.g., AI conversations, queries)

We use this information to:

• Create and manage user accounts
• Provide customer support
• Process payments
• Enable AI-powered conversations and features (e.g., speech-to-text, text-to-speech)

Legal Basis: We process this data based on your consent and to fulfill contractual obligations.

Automatically Collected Information

In addition to the data you provide, the Application may collect certain information automatically, such as:

• Device type (mobile or computer)
• Unique device ID
• IP address
• Operating system and browser type
• Application usage data

Legal Basis: We collect this information based on our legitimate interests to improve user experience and ensure the security and functionality of the Application.

1. Clerk (Authentication)

• Data Collected: User login credentials, email addresses, IP addresses.
• Purpose: For user authentication and managing user accounts.
• Data Sharing: Personal data is shared with Clerk for secure authentication and account management.

2. Stripe (Payment Processor)

• Data Collected: Payment details (credit card information, billing address), transaction data.
• Purpose: To facilitate secure payment processing.
• Data Sharing: Stripe receives necessary payment data to complete transactions.
• Data Transfer: Stripe may transfer data outside the EEA and complies with the EU-U.S. Data Privacy Framework (DPF) or uses Standard Contractual Clauses (SCCs).

3. Crisp Chat (Customer Support)

• Data Collected: Chat messages, contact details.
• Purpose: To provide customer support and manage inquiries.
• Data Sharing: Crisp handles user-provided information to resolve support tickets.

4. Neon (Backend Services)

• Data Collected: Personal data stored in our app's database, including user data.
• Purpose: To host and manage the Application's database.
• Data Sharing: Neon manages personal data stored in the database.
• Security: Neon ensures data security through encryption and backups.

5. Vercel (Hosting and Deployment)

• Data Collected: User data, including IP addresses logged during access.
• Purpose: To host our web app and ensure smooth operation.
• Data Sharing: Vercel may collect log data containing user information for technical performance.

6. Microsoft Azure (AI Speech Service)

• Data Collected: Conversation data, user input sent to AI-powered services.
• Purpose: To provide text-to-speech and speech-to-text services through Azure's AI Speech service.
• Data Sharing: Data is shared with Microsoft Azure to enable text-to-speech and speech-to-text services.
• Security: Microsoft Azure ensures compliance with data security protocols to protect the data processed.

7. OpenAI (AI Processing)

• Data Collected: User input data sent for natural language processing (e.g., conversation data).
• Purpose: To provide AI-based conversations and natural language processing.
• Data Sharing: OpenAI processes user input to deliver AI-based services.

8. Prisma (Database ORM)

• Data Collected: Personal data stored in the database via Prisma's Object-Relational Mapping (ORM) system.
• Purpose: To manage and interact with the database efficiently.
• Data Sharing: Prisma interacts with the data stored in the database to ensure efficient operation.

9. Google (SSO Authentication)

• Data Collected: Email addresses, names.
• Purpose: To authenticate users through Single Sign-On (SSO) services.
• Data Sharing: Google receives user data for authentication purposes.
• Data Transfer: Google complies with GDPR and uses SCCs or the EU-U.S. Data Privacy Framework (DPF) for data transfers outside the EEA.

10. PostHog (Product Analytics and Quality Checks)

• Data Collected: How you use the Application, your account ID, and the chat messages you send in conversations with Joost, together with the messages from Joost they reply to.
• Purpose: To understand how the Application is used, and to check the quality of the automatic checks on your chat messages, such as the check that decides whether a message counts.
• Data Sharing: Your chat messages are sent to PostHog for these quality checks.
• Data Location: PostHog stores this data on servers in the EU.

• Consent: We ask for your consent before processing any personal data not necessary for providing services (e.g., AI speech services).
• Contractual Necessity: Processing is required to provide the Application's services (e.g., user authentication, processing payments).
• Legal Obligation: We may process personal data to comply with applicable laws or respond to lawful requests.
• Legitimate Interest: For data required to improve and secure our services.

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can ask us to correct inaccurate or incomplete data.
• Deletion: You can request the deletion of your data ('right to be forgotten').
• Data Portability: You can request that we transfer your data to another organization.
• Restriction: You can request that we limit the processing of your data.
• Objection: You have the right to object to data processing for direct marketing purposes.

To exercise these rights, please contact us at hello@dutchwithjoost.com. We will respond within 30 days as required by GDPR.

• User Provided Data: Retained as long as your account is active.
• Automatically Collected Data: Stored for up to 24 months, after which it may be aggregated or anonymized.

If you wish to delete your User Provided Data, contact us at hello@dutchwithjoost.com.

• The use of Standard Contractual Clauses (SCCs)
• Participation in the EU-U.S. Data Privacy Framework (DPF)