Privacy notice.

Controller

Silentleak, 44, 1622 BL Hoorn, The Netherlands

Privacy contact

hello@silentleak.com

Data stored in

European Union (Ireland)

What we process

• Your request: name, work email, company, role, website, revenue range, how you sell, platforms and markets.
• Exports you upload, with personal data removed before upload. Files that still contain it are deleted on arrival.
• Messages between us, approvals you give for claims, and records of uploads, downloads and deletions.

Why, and on what basis

To answer your request and carry out the review and recovery work you ask for (contract, GDPR article 6(1)(b)), and to keep records the law requires (legal obligation, article 6(1)(c)).

We write to people whose role makes our work relevant: founders, finance and operations leads at online businesses. This is the information GDPR article 14 asks us to give you.

• What we hold: your name, role, company and work email, a note on why the company seemed relevant, and the messages exchanged.
• Where it came from: public sources only, such as your company website, its imprint, team pages or public posts. The email names the source. We never buy or guess addresses.
• Why: to offer a service relevant to your role (legitimate interest, article 6(1)(f)). We write a few times at most, never to personal addresses, and not at all where the law requires prior consent for this.
• How to stop it: reply “no”, use the unsubscribe link, or write to hello@silentleak.com. Objections to direct marketing are always honoured.

No tracking or advertising cookies, and no third-party analytics. Visits are counted with an anonymous fingerprint that changes every day, so a visitor can't be recognised on another day or another site. Details in the cookie notice.

Uploaded files

Within 30 days of the readout; at the latest 90 days after upload

Requests without a review

12 months

Outreach without a reply

6 months

Opt-outs

A one-way fingerprint, kept to honour it

Invoices and contracts

7 years (Dutch law)

Only the providers that run our systems, under data processing terms: Supabase (database and file storage, EU), Resend (email, EU), Vercel (website hosting) and OpenRouter (drafting readouts and claim letters from findings, never files, with zero data retention). We never sell data, and never share your files with carriers, platforms or payment providers without your written approval of a specific claim. See Trust.

You can ask to see what we hold about you, correct it, delete it, restrict or object to its use, or receive it in a portable format. Write to hello@silentleak.com; we answer within one month.

If you are unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority where you live.