AgentDrives is a trade name of Matfy (eenmanszaak), KvK 76030482, VAT NL003040716B45. Matfy is responsible for your data. Questions and requests: hello@agentdrives.com.
What we keep and why
| What | Why, and on what basis | How long |
|---|---|---|
| Your account: email, name if given, your Google profile if you sign in with Google, API keys (hashed) | To give you an account (contract) | Until you delete it |
| Sign-ins: IP address and browser | To keep your account safe (legitimate interest) | 30 days |
| Orders and free checks: email, the product, notes, the company name, billing address and VAT ID you give at checkout (they go on our invoice), an ad's line and logo, where you came from when you signed up | To deliver what you ordered (contract) and keep the books (legal obligation) | 7 years (Dutch tax law) |
| Test access, a one-use code or a test-mode login you give us for a drive | To drive your product past its sign-up, or buy your plan (contract) | Until the drive is done |
| Claims, products you follow, replies you post | To run them for you (contract) | Until you delete them or your account. A reply is public. |
| Messages between you and us, support questions, forms (with the IP address a form came from) | To answer you (contract, or legitimate interest if you are not a customer) | 2 years after the last message |
| Posts that mention or reply to our accounts on social platforms: your handle and words | To answer you (legitimate interest) | 2 years after we read them |
| A log of the mail we send you: address, subject, text | To check it arrived and answer questions about it (legitimate interest) | 90 days |
| If your product is listed: your company's business address as published on its own website, the page it is on, and the one email we sent | To tell your company once that its product is listed (legitimate interest) | 6 months. Then only your company's domain and a hash of the address, so we never write twice. |
| Mailing lists: email, when and from where (IP) you signed up | The monthly report and offers (consent) | Until you unsubscribe. Then only a hash of your address, so you are not added again. |
| Addresses our mail bounced from, or that marked a mail as spam | So we never mail them again (legitimate interest) | Until we lift it or you delete your account |
| Access logs: IP address, browser, page, referrer | To keep the site secure and running (legitimate interest) | 7 days |
| Server logs: errors and events, which can include your email address or browser | To find and fix faults (legitimate interest) | 30 days |
| Mail your product sends to our test accounts during a drive | To check sign-up and verification (contract, or legitimate interest for products we test on our own) | 90 days |
You need an email address for an account and an order; without one we can't sign you in or deliver. Everything else is up to you. Page views and "Visit" clicks are counted per page, and AI agents' lookups per product, without IP addresses or cookies. Customers may get an occasional mail about our other products, such as an upgrade (legitimate interest); you can say no when you order, and each mail has a link to stop them. Encrypted backups hold copies of this data for up to 12 months, to recover from a failure.
If we emailed your company that its product is listed: we found the address on your company's own website, we write once, and the link in that email, or a reply, stops all email from us to your company for good.
We make no decisions about you by automated means alone. An AI model helps us draft answers to support messages.
Who processes it for us
| Company | What for | Where |
|---|---|---|
| Hetzner | Our servers and database | Germany |
| Stripe | Payments and our invoices | Ireland, USA |
| Cloudflare | Network, incoming mail, encrypted backups | USA, worldwide network |
| Resend | Sending our mail | USA |
| Sign in with Google, our mailbox | USA | |
| Anthropic | The AI model for support drafts and our agent | USA |
For transfers to the USA we rely on the EU–US Data Privacy Framework or the EU's standard contractual clauses. Ask us for a copy.
When you pay, Stripe processes the payment for us and keeps your card details under its own privacy policy. We give Stripe your email, and get back the order, its amount and status and your invoice, never your card number.
Cookies
One cookie, set when you sign in, keeps you signed in for up to 30 days. Signing in with Google sets a short-lived one for that step. Your browser also keeps a note that you are signed in, cleared when you sign out. There are no analytics, advertising or tracking cookies, so there is nothing to consent to.
Your rights
You can see, correct or delete your data, get a copy of it, limit how we use it, and object to its use. Delete your account in your account or with POST /api/auth/delete-user: your messages, support questions and replies go with it, a subscription ends, and we delete your customer record at Stripe. Your orders stay 7 years for the books, without your email, notes or test access. The hash of an unsubscribed address stays. Unsubscribe with the link in any mail, which withdraws your consent from then on. For anything else write to hello@agentdrives.com: we answer within a month.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
When this notice changes, the date at the top changes. A change that matters to you reaches you by email first.