Privacy Policy

Effective 16 June 2026

Dutchcode B.V. (“Dutchcode”, “we”) operates SalesHose. We keep data in the EU by default and ask for as little as possible. This policy explains what we collect and why. Requests or questions: support@dutchcode.com.

1. Two roles

• For our website, your account and billing, Dutchcode is the data controller.
• For the responses you collect from your respondents through your forms, you are the controller and Dutchcode is your processor — we process that data only on your instructions to run the Service. A data processing agreement (DPA) is available on request.

2. What we collect

• Account data — your name, email and workspace settings.
• Billing data — handled by our payment provider Stripe; we receive limited details (plan, status, last digits) and never see full card numbers.
• Usage data — basic logs and aggregate analytics to keep the Service secure and improve it.
• Respondent data — whatever your forms ask for (e.g. name, email, answers). You decide what to collect; please only ask for what you need and have a lawful basis.

3. Why, and on what basis

We process data to provide and secure the Service (performance of our contract with you), to meet legal duties such as tax and accounting, and for our legitimate interest in improving and protecting SalesHose. Respondent data is processed on your instructions as your processor.

4. Where your data lives

SalesHose runs on Cloudflare’s edge with primary storage in the European Union (Western Europe region). We do not sell your data and do not share it for advertising.

5. Subprocessors

We use a small set of trusted providers to run the Service:

• Cloudflare — hosting, edge compute, database and AI form generation (EU).
• Stripe — payment processing.
• Sentry — error monitoring; we disable sending personal data by default.

We require each provider to protect data appropriately. An up-to-date list is available on request.

6. Retention

We keep account data while your account is active and for as long as needed for legal and accounting purposes. You can export or delete responses at any time; deleting your account removes Your Data within a reasonable period, subject to any mandatory retention.

7. Your rights

Under the GDPR you can access, correct, delete, export or object to the processing of your personal data, and withdraw consent. Email support@dutchcode.com and we’ll respond within the legal timeframe. For respondent data, contact the form owner (the controller); we’ll help them assist you. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Cookies

We use only what’s needed to run the site and keep you signed in. We don’t use advertising or cross-site tracking cookies.

9. Security

We use encryption in transit, access controls and reputable infrastructure. No system is perfectly secure; if a breach affects you, we’ll act and notify you as the law requires.

10. Changes

We may update this policy; the latest version always lives on this page with its effective date.

Contact: Dutchcode B.V. — support@dutchcode.com.