Privacy Policy

Last updated: September 17, 2025
Version: 1.0

1. Who we are

This website and service are provided by Omoik (trade name), a sole proprietorship of Sander Volbeda.

Chamber of Commerce (KvK): 53236734
VAT: NL002247968B39
E-mail: [email protected]

For privacy questions, please contact [email protected] (attn. Sander Volbeda).

2. Scope

This policy applies to:

Marketing website: omoik.com
App / product environment: app.omoik.com (registration, login, billing via Stripe)

3. What personal data we process

3.1 On omoik.com (marketing website)

Analytics data via Matomo (self-hosted): anonymized visit data (e.g., page visits, device/source, shortened IP, events).
Cookies: only for essential site functionality and privacy-friendly analytics. No advertising profiles.

We do not keep error logs with personal data on omoik.com.

3.2 On app.omoik.com (the product environment)

Account & billing: name, e-mail, password (hashed), company name (optional), payment and billing details (via Stripe).
Usage data within the app: survey/slide-in configurations, response times, basic technical metadata required for service functionality.
Payment details: processed by Stripe; we do not see full card information.

Registration and billing data are stored on app.omoik.com, not on omoik.com.

Purpose	Legal basis (GDPR)	Explanation
Providing the service (account, app usage)	Contract performance (Art. 6(1)(b))	Necessary to create your account and run the app.
Payment & invoicing	Legal obligation (Art. 6(1)(c))	Required by Dutch tax law.
Customer support	Legitimate interest (Art. 6(1)(f))	To assist you quickly via e-mail/Slack/WhatsApp.
Product improvement & security	Legitimate interest (Art. 6(1)(f))	Privacy-friendly analytics, error prevention, performance.
Website analytics	Legitimate interest (Art. 6(1)(f))	Self-hosted Matomo, privacy-friendly. You can opt out via cookie settings.

No marketing/newsletters: we currently do not send marketing e-mails or newsletters.

5. Cookies and tracking

App (app.omoik.com): we use no cookies for the software itself. We work with privacy-friendly techniques (such as localStorage) and do not store unnecessary personal data.
Website (omoik.com): we use Matomo (self-hosted) for analytics. Depending on configuration, Matomo may set functional/analytical cookies. We apply IP anonymization and do not collect sensitive profile behavior.
No advertising cookies / no third-party trackers for marketing purposes.

You can adjust your preferences through our cookie settings (banner/preferences). Where technically possible, we respect Do Not Track.

We only share data with parties necessary to deliver our service, under data processing agreements and appropriate safeguards:

Hosting app.omoik.com: Hetzner (Germany/EU)
Hosting omoik.com: Cloud86 (Netherlands/EU)
Payments: Stripe (Stripe Payments Europe, Ltd. – EU; subprocessors outside the EEA possible under SCCs)
Support communication: e-mail, Slack and WhatsApp (on request). These services may process data outside the EEA; we use Standard Contractual Clauses (SCCs) where applicable and share only minimal data.

We do not sell personal data.

7. Data transfers outside the EEA

When data is processed outside the EEA (e.g., by Stripe/Slack/WhatsApp), we ensure appropriate safeguards such as EU Standard Contractual Clauses (SCCs) and limit the data to what is strictly necessary.

8. Data retention

Category	Retention period
Feedback and usage data in the app	As long as the account is active. All data is deleted upon termination.
Account data	As long as the account is active; basic data kept until termination and legal obligations fulfilled.
Invoices/bookkeeping	7 years (Dutch tax law).
Analytics (omoik.com)	Retained as briefly as necessary for trend analysis; anonymized where possible.

9. Security

We take appropriate technical and organizational measures (e.g., encryption in transit, access control, minimal data collection, EU hosting for the app). No system is 100% secure; in case of a data breach we will act in accordance with GDPR obligations.

You have the right to:

Access your personal data
Rectify inaccuracies
Erase your data (“right to be forgotten”)
Restrict processing
Data portability
Object to processing based on legitimate interest

Submit requests via [email protected]. We respond within 30 days. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Minors

Our service is not directed at children under 16. If you believe we have inadvertently collected data from a minor, please contact us via [email protected] so we can delete it.

12. Automated decision-making

We do not engage in automated decision-making or profiling that has legal or significant effects on you.

13. External links

Our website may contain links to other sites. We are not responsible for the privacy practices of third parties. Always read their privacy policies.

14. Changes

We may update this privacy policy. The last updated date at the top will always reflect the latest version. In case of material changes, we will notify you via the website or by e-mail (if applicable).

15. Contact

Omoik — attn. Sander Volbeda

E-mail: [email protected]