Who is responsible

Honest AI BV, based in Rotterdam, Dutch Chamber of Commerce (KvK) number 42133929. Honest AI BV is the data controller for this site, and owns this site.

Questions about this policy? Email thijs@honest-ai.nl.

What data

Data you enter yourself:

Booking an introductory call via plan.honest-ai.nl: the details you enter there and the time you pick.
Partner form (Honest.Studio): name, email address, company, and a short description of your proposal.

The site also measures visitor statistics with Plausible Analytics: aggregated numbers such as page views and referring sites. Plausible uses no cookies, stores no personal data, and does not retain your IP address. The data lives on servers in the EU. The Plausible script is the only external script on the site; there are no tracking pixels.

On a page view the site also checks, at company level, which organisation owns the network you browse from. If your visit comes in through a recognised internet provider, telecom carrier, hosting company or VPN service, it stops right there; the site decides this from the public registers bgp.tools and PeeringDB. Otherwise your IP address goes to looot on every page view, and looot looks up the network owner at IPinfo. As a processor, looot keeps those lookups, including your IP address, in its history while my looot account exists; IPinfo receives the IP address under its own terms. I do not store your IP address myself; it sits in memory briefly to limit abuse. Only the name, domain, network number and country of the network owner and the page you viewed go on to my own n8n installation. Browsers that send Global Privacy Control or Do Not Track skip this entirely. No attempt is made to find out who you are personally.

Why

You can read the memo without submitting personal data. If you book an introductory call, I use your data only to put the call in my calendar and send you the invitation. I use the data from the partner form only to respond to your collaboration proposal. Your data is not shared with third parties and not sold. I use the network owner and the pages viewed to see which companies show interest (legitimate interest, Article 6(1)(f) GDPR). They appear as a notification in my Slack.

Retention

I keep your data only as long as needed for the purpose you provided it for, and no longer. Once a conversation or delivery is complete and no further correspondence is expected, your data is deleted. I do not keep your IP address myself; looot keeps the lookup as described above. The daily table of company domains and pages viewed is emptied every night. The notifications in Slack contain company data only.

Processors

At launch, your data is processed via:

Postmark for sending email.
Supabase for storage of submissions.
Google (Calendar and Meet) for booked introductory calls and the invitation.
Vercel for hosting the planner at plan.honest-ai.nl.
Plausible Analytics for cookieless visitor statistics, hosted in the EU.
Cloudflare for hosting this site.
looot and IPinfo for looking up the network owner of an IP address.
n8n (self-hosted on Railway) for processing the company notification.
Slack for internal notifications about visiting companies.

Data processing agreements compliant with GDPR will be in place with these parties.

Your rights

You have the right to access, correct, and delete your data. Send an email to thijs@honest-ai.nl and I will respond within two working days.