SlimbotPrivacy policy
1. Data controller
Tailored Offer
Sole trader, based in Maastricht · KvK 99488299 · Slimbot is a brand of Aanbod op Maat
info@slimbot.nl
Get in touch
085 060 4471
2. What data do we process?
When using the Slimbot platform, we process the following personal data:
| Category | Data | Purpose |
|---|---|---|
| Account details | Name, e-mail address, company name, phone number | Creating and managing your Slimbot account |
| Payment details | Billing address, payment method (processed via Mollie) | Invoicing and payment processing |
| Usage data | IP address, browser, platform usage, logs | Security, support and improvement of the service |
| Conversation data | WhatsApp conversations via your account, chatbot interactions | Provision of the AI assistant service |
| Contact details of end users | WhatsApp numbers of your customers (via your account) | Processing on your behalf as data controller |
| Slimbot app (iOS/Android) | Push device token (APNs/FCM), app version, platform | Push notifications for new messages; keep session stable |
2a. Slimbot app and push notifications
The Slimbot app (App Store / Google Play) is a secure shell around the same Slimbot platform. For this we may:
- store a push device token to send notifications (new message, important updates);
- keep your session active longer (up to 90 days) so you don't have to log in repeatedly;
- use technical app information (iOS/Android, app version) for support and security.
Push notifications run via the infrastructure of Apple (APNs) and/or Google (FCM). Those parties only receive the technical token and notification text needed to deliver the notification — not the full chat history. You can turn off notifications in your device settings; when you delete your account, we also delete the stored tokens. See deleting data.
3. Legal basis for processing
We process personal data on the following legal bases:
- Contract: to perform the services you have signed up for;
- Legitimate interest: for security, fraud prevention and platform improvement;
- Legal obligation: for tax retention of invoice data (7 years);
- Consent: for marketing e-mails (if you have opted in, always revocable).
4. Data processing agreement
When you conduct conversations with your customers via Slimbot, Aanbod op Maat processes personal data on your behalf. Our data processing agreement (DPA) applies to this; it is automatically part of every Slimbot account with which you conduct conversations. We will send a signed version on request (info@slimbot.nl).
5. Retention periods
- Account data: for the duration of the subscription + 12 months;
- Invoice details: 7 years (tax retention obligation);
- Chat history: configurable (default 90 days, adjustable per account);
- Logs and technical data: maximum 90 days;
- After deletion request: completely deleted within 30 days.
6. Sharing with third parties
We only share your data with:
- Mollie — payment of your subscription. If you connect your own payment account (such as Mollie or Stripe) for payment links to your customers, that is your own agreement with that party;
- AI providers — for processing chatbot messages; we work exclusively with AI providers with a data processing agreement (DPA). Some of these process data in the United States; the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses apply to this;
- Hosting partner — server infrastructure on Dutch soil;
- Meta (WhatsApp Business API) — for sending and receiving WhatsApp messages;
- Apple / Google — exclusively for push notifications in the Slimbot app (APNs / FCM).
We never sell your data to third parties for marketing purposes. The complete, current list of parties that process data on our behalf (with country and transfer basis) is available on our sub-processor list.
7. Security
Slimbot uses the following security measures:
- Encrypted connections (TLS/HTTPS) for all data transport;
- Servers exclusively in the Netherlands;
- Access control via RBAC, 2FA and audit logs;
- Regular backups;
- Encryption of stored data where applicable.
8. Your rights (GDPR)
You have the following rights regarding your personal data:
- Access — request which data we hold about you;
- Rectification — have incorrect data corrected;
- Deletion — have your data deleted ("right to be forgotten");
- Object — object to processing based on legitimate interest;
- Data portability — receive your data in a machine-readable format;
- Restriction — have processing restricted in certain cases.
You can submit requests via the contact form. We will respond within 30 days. You can also lodge a complaint with the Dutch Data Protection Authority (AP) via autoriteitpersoonsgegevens.nl.
9. Cookies
Slimbot.nl uses minimal cookies:
| Cookie | Purpose | Retention period |
|---|---|---|
| Session cookie | Stay logged in to the platform | Until browser closes / max 30 days (web) |
| sb_remember / sb_native | Stay-logged-in (web) and Slimbot app recognition | Up to 90 days |
| Preference cookie | Remember your settings | 1 year |
We do not place third-party tracking cookies or advertising cookies. Only anonymised data is used for the use of analytical tools.
10. Changes
This privacy policy may be amended. Substantial changes will be communicated by e-mail at least 14 days in advance. The most current version is always on this page.
Questions about your privacy? Use the contact form.