Legal

Privacy Policy

Last updated: [DATE]

Draft document, not yet legally reviewed This is a starting point based on how Tarifi actually works today. It is not legal advice. Have a lawyer review this, fill in the placeholders, and check the sections on AI sub-processors and transfers outside the EEA in particular, before going live.

[COMPANY NAME], registered at [BUSINESS ADDRESS] (company registration number [REGISTRATION NUMBER]), referred to as "Tarifi" or "we", is the data controller for the personal data described below. This policy explains what data we collect, why, and what rights you have.

1. Who this policy applies to

This privacy policy covers (a) visitors to this website, and (b) account holders and Users of Tarifi. If you, as a Tarifi customer, process personal data of your own customers within quotes (for example, name and email address of a quote recipient), then this policy does not apply to that data; instead, our Data Processing Agreement applies, under which Tarifi acts as a processor on your behalf.

2. What data we collect

Website visitors

Information you enter in the contact form: name, email address, organisation and your message.
This website loads fonts (Google Fonts) directly from Google's servers. This transmits your IP address to Google, as is standard when loading externally hosted content.

Account holders and Users

Sign-up details: name, email address, organisation and account settings.
Billing details needed to invoice Plans.
Usage data: how you use Tarifi, for example to operate and improve the Service.
Content you enter yourself (such as quote text), to the extent needed to deliver features like AI text suggestions and follow-up advice, see below.

3. Why we use this data

To perform the Agreement with you: managing your account, Plan and billing, and delivering the Service.
To respond to enquiries via the contact form.
To secure, maintain and improve the Service.
To provide AI-assisted features (text suggestions, follow-up advice), when you use those features.
To comply with legal obligations, such as tax record-keeping requirements for billing data.

4. Sharing with third parties

We only share data with third parties to the extent needed to deliver the Service, including:

Hosting provider: [HOSTING PROVIDER], for running the website and application.
OpenAI and Anthropic: when you use AI features (such as text suggestions or follow-up advice), the relevant content (for example quote text) is processed by these language model providers to generate the suggestion.
Accounting integrations (Moneybird, e-Boekhouden.nl, Jortt): only if you activate such a connection yourself in your account settings; that data exchange then runs directly between your Tarifi account and your chosen accounting service, under that service's own terms.

We do not sell personal data to third parties.

5. Transfers outside the EEA

OpenAI and/or Anthropic may process data on servers outside the European Economic Area (EEA), for example in the United States. Where that is the case, we put in place appropriate safeguards, such as Standard Contractual Clauses. [To be confirmed by a lawyer, which safeguards actually apply for the providers used.]

6. Retention period

We do not retain personal data for longer than needed for the purposes for which it was collected, and no longer than legally required (for example, the 7-year tax record-keeping requirement for billing data). After account termination, account data is deleted or anonymised within a reasonable period, unless a legal retention obligation requires otherwise.

7. Security

Tarifi is built multi-tenant: data belonging to different organisations is logically separated, and access within an account is role-based, so users only see what's relevant to them. We take appropriate technical and organisational measures to protect data against loss and unauthorised access.

8. Your rights

You have the right to access, rectify and erase your personal data, and the right to object to or request restriction of processing, and the right to data portability. Contact us at info@tarifi.nl to exercise these rights. You also have the right to lodge a complaint with your local data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).

9. Changes

We may update this policy. The most current version is always available on this page.

10. Contact

Questions about this privacy policy? Email info@tarifi.nl.