Privacy notice
Last updated: 30 October 2026
Who is responsible
Farstripes, eenmanszaak (sole proprietorship) under Dutch law, KvK 75488086, VAT NL001849378B95, Van der Duinstraat 128, 5161 BS Sprang-Capelle, the Netherlands. E-mail: info@farstripes.com.
For your own account (your name, e-mail address, sign-in) we are the controller. For the data you put in your workspace — feeds, channels, orders, stock — you are the controller and we process it for you under the DPA.
What we process
Account: your name, e-mail address and a password hash (the password itself is never stored), your role and workspace.
Workspace: supplier feed settings and the product data in them (EANs, prices, stock); your pricing rules; channel settings; inventories and scanned items; marketplace offer data.
Marketplace and supplier credentials: stored encrypted at rest (AES-256-GCM) and only decrypted by the service at the moment it calls that marketplace or supplier.
Order lines: marketplace, order ID, EAN, quantity, price and order date — no buyer names, addresses or contact details.
Technical data: server logs, error reports and session replays — 10% of sessions and every session in which an error occurs — with all text masked and media blocked, to find and fix faults.
Why
To provide the service you signed up for (the contract), to keep it secure and working (our legitimate interest), and to meet legal obligations such as bookkeeping. We do not sell data, show ads or use tracking cookies.
Cookies
The cookies sign-in needs: the session cookie, the security (CSRF) cookie and the cookie that remembers which page to return to after signing in. Appearance preferences remember your theme and contrast choices. No analytics or advertising cookies.
Who else handles it
These providers process data for us. Where data goes to a provider outside the EU, the transfer relies on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses in that provider's data processing terms. Stripe will be added for payments when paid plans open.
| Provider | What it does for Ventunity | Where |
|---|---|---|
| Vercel Inc. | Hosts the web app and its API | Frankfurt, Germany (fra1) |
| Supabase Inc. | Database and sign-in (accounts, workspace data) | Frankfurt, Germany (eu-central-1) |
| Amazon Web Services (Lightsail) | Runs the worker that pulls feeds and pushes offers | Frankfurt, Germany (eu-central-1) |
| Amazon Web Services (WorkMail) | Sends sign-up confirmation and password-reset e-mails for Supabase Auth | Ireland (eu-west-1) |
| Cloudflare Inc. | Carries the encrypted connection between the app and the worker | Global network |
| Functional Software Inc. (Sentry) | Error reports and masked session replays (all text masked, media blocked) | Germany (de.sentry.io) |
| GitHub Inc. | Stores Ventunity's source code and runs its tests — no customer data | Provider's own infrastructure |
| Telegram | Operational alerts to the operator (account and channel names, counts — no buyer data) | Provider's own infrastructure |
| Anthropic PBC (Claude) | AI tooling the operator uses for support and maintenance; it can read production data while doing so | United States |
| OpenAI (Codex) | AI tooling the operator uses for code review and maintenance; it can read production data while doing so | United States |
How long
| Data | Kept for |
|---|---|
| Your account, workspace settings, feeds, channels, inventories, order lines | As long as your workspace exists |
| Push journal (what was sent to a marketplace, per offer) | 14 days |
| Feed pull differences | 14 days |
| Job progress records and generated output files | 14 days |
| Created offers, skipped and rejected push lines | 90 days |
| Marketplace price snapshots | 120 days |
| Activity log and the Amazon listing sweep log | 180 days |
| A deleted workspace (credentials are wiped at once; nobody can sign in to it) | Removed for good 30 days after deletion |
| Database backups (the whole database, daily) | The last 8 days — so a deleted workspace is gone from every backup 38 days after deletion |
| Error reports and session replays (Sentry) | Sentry's retention for the plan in use |
Your rights
You can ask to see, correct, export or delete your personal data, and object to processing. E-mail info@farstripes.com or write to the address above; we answer within one month. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.