Privacy statement

Who we are

This privacy statement is issued by YourOwn BV (“YourOwn”, “we”), established at Veerweg 6, registered with the Dutch Chamber of Commerce under number 94670536.

Contact: info@yourownhq.com

We process personal data in accordance with the General Data Protection Regulation (GDPR) and relevant Dutch privacy and telecommunications legislation.

Who does this apply to?

This statement applies to:

• Visitors to our website(s): yourown-ai.com
• People who contact us (email, forms, telephone)
• Business contacts of clients and suppliers
• Users of our chat and AI applications, insofar as YourOwn is the data controller

In client projects where we supply chat/AI and process personal data on behalf of the client, the client is usually the data controller and YourOwn the processor. In that case the client's privacy rules apply primarily and we record our obligations in a data processing agreement.

Which personal data do we process?

Depending on use, we may process:

• Name, email address, telephone number, company name, job title
• Content of communications (messages, emails, attachments)
• Contract and invoicing details (insofar as necessary)
• Technical data and logs (IP address, browser/device, date/time, error and security logs)
• Chat/AI content: messages and files entered into the chat or AI application and the generated output (where applicable)

Please avoid using sensitive personal data (such as health data) in chat or uploads, unless strictly necessary.

What do we use that data for? (purposes)

We process personal data in order to:

• Respond to contact requests and arrange appointments
• Deliver and manage our services and provide support
• Secure our website and systems and prevent misuse
• Improve our services technically (for example error analysis)
• Handle administration, invoicing and legal obligations

We only carry out marketing (such as newsletters) where this is permitted and, where required, on the basis of consent.

Legal basis (why are we allowed to process this?)

We process personal data on the basis of:

• Performance of a contract and/or pre-contractual steps
• Legitimate interest (for example security, business operations, limited B2B communication)
• Legal obligation (for example tax retention requirements)
• Consent (for example certain cookies/newsletter), where required

AI and chat: some extra clarity

YourOwn supplies chat and AI applications to business clients and also uses such chat applications itself (for example on the website or in support).

No training on client data, unless agreed: we do not use chat or client content to train AI models, unless this has been explicitly agreed in writing.

Logging: we may store chat and technical logs for security, support and quality assurance.

Retention period for chat/AI logs: (see below)

Cookies and analytics

We may use cookies and similar techniques:

• Functional/necessary cookies (for operation and security)
• Analytical cookies (only where permitted and, where required, on the basis of consent)

Cookie settings and/or cookie list: at the time of publication of this privacy statement we collected no cookies.

Do we share data with third parties?

We do not sell or rent out personal data.

We only share data with parties that are necessary for our services (for example hosting, email, analytics, support and infrastructure suppliers), and only for the purposes set out above. Where required we conclude data processing agreements and put appropriate contractual safeguards in place.

Transfers outside the EEA

If personal data is processed outside the European Economic Area, we ensure appropriate safeguards, such as EU standard contractual clauses (SCCs) and additional measures where necessary.

Retention periods

We do not keep personal data longer than necessary:

• Contact/lead communication: up to 24 months after the last contact
• Client administration and invoices: 7 years (statutory tax retention obligation)
• Security and system logs: 6 to 12 months
• Chat/AI content and logs: up to 12 months, unless agreed otherwise in writing

Once the retention period has expired, the data is deleted or anonymised.

Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and unlawful processing.

Your rights

You can request:

• Access
• Correction
• Erasure
• Restriction of processing
• Portability (where applicable)
• Objection to processing based on legitimate interest
• Withdrawal of consent (where applicable)

Requests: support@yourownhq.com. We may ask for verification.

Complaints can be submitted to the Dutch Data Protection Authority.

Links to third parties

Our website may contain links to third-party websites and services. We are not responsible for their privacy practices.

Changes

We may amend this privacy statement. The most up-to-date version is published on our website with the date “Last updated”.

Contact

YourOwn BV

Veerweg 6

Chamber of Commerce: 94670536

Email: info@yourownhq.com