ZienKlaar
Language
NLEN
← Back

Privacy Policy

Version 1.3 · 2026 · Media Koerier (KVK 94186367)

1. Data Controller

Media Koerier, located at Generaal Spoorlaan 133, 2283 GE Rijswijk, is the data controller for the processing of personal data via the ZienKlaar platform. Contact: info@zienklaar.nl

2. What data do we process?

Account data: name, email address, billing details and payment history.

Business buyers: if you buy on behalf of a company, we additionally process company name, address, Chamber of Commerce number and VAT identification number. We collect these at checkout and use them solely for the statutory invoice (art. 35a Dutch VAT Act) and our VAT administration. Private individuals do not provide them: we are not required to issue invoices to consumers (art. 34c Dutch VAT Act). For every purchase — business and private alike — we do record your name, email address, the invoice line, the amount and the VAT, because VAT is due on every sale and has to be entered into our administration.

Usage data: selected room type, style, date and time of generations.

Photos and generated images: uploaded property photos and generated results are stored in secure cloud storage for 30 days. This allows you to retrieve and regenerate images via your gallery. After 30 days, files are automatically deleted.

AI transparency: every image and transformation video generated by ZienKlaar carries a visible, non-removable watermark indicating that it was created or edited with AI, in line with the transparency obligation of Article 50 of the EU AI Act (Regulation (EU) 2024/1689).

Technical data: IP address, browser type and session information via our authentication provider (Clerk).

Support chat and support tickets: when you ask a question via the chat on our website, the messages you type are sent to Google's Vertex AI in the EU region europe-west4 (the Netherlands) to generate an answer. We do not store the conversation itself. If you turn the conversation into a support ticket, we store the conversation together with the email address you provide — or, if you are signed in, the email address of your account — so that we can handle your question by email. Support tickets are retained for 90 days and automatically deleted thereafter.

3. Purpose and legal basis

We process data on the basis of (a) performance of the contract (service delivery, invoicing and customer support for customers), (b) legal obligations (VAT administration), and (c) legitimate interest (security, fraud prevention and answering visitors' questions via the support chat).

4. Sub-processors

We use the following sub-processors:

  • OpenAI, Inc. (US) — processing of uploaded photos for AI image editing. Transfer based on Standard Contractual Clauses (SCC). Photos are not stored by OpenAI after processing.
  • Google LLC (US) — creative AI image generation via Google Gemini, generating the answers in our support chat (the messages you type in the chat), and email via Google Workspace. The support chat calls Vertex AI in the EU region europe-west4 (the Netherlands); image generation may take place outside the EU. The support-ticket email to our support address — containing your contact email address and the chat conversation — is sent via Google Workspace and stored in our Workspace mailbox. Transfer based on SCC. Google's data processing policy applies.
  • Modal Labs, Inc. (US) — Photos are exclusively processed and not stored by Modal. Transfer based on SCC.
  • Vercel, Inc. (US) — hosting platform for the web application and storage of photos, generated images and videos. Transfer based on SCC.
  • Neon, Inc. (EU) — PostgreSQL database hosting for account data and usage statistics, hosted in the EU (Frankfurt, eu-central-1).
  • Clerk, Inc. (US) — authentication and identity management. Transfer based on SCC.
  • PostHog (EU) — cookieless product analytics (usage statistics), hosted in the EU. No cookies are placed.
  • Mollie B.V. (NL) — payment processing. Based in the EU.
  • Moneybird B.V. (NL) — invoicing and bookkeeping. For every purchase, your name, email address, the invoice line, the amount and the VAT are recorded there; if you buy as a business, also company name, address, Chamber of Commerce and VAT numbers. Based in the Netherlands; data is hosted within the EU.

5. Retention periods

Account data is retained for as long as the account is active, plus 2 years thereafter for administrative purposes — with the exception of invoice and payment data. Statutory fiscal retention obliges us to keep those for 7 years, counted from the end of the financial year in which the invoice was issued (art. 52(4) AWR). That period overrides the 2-year period above and is also the ground on which we must partially refuse an erasure request for those records (art. 17(3)(b) GDPR). So if you delete your account, the invoice itself remains; its link to your account is severed. Uploaded photos and generated images are retained for 30 days in secure cloud storage, after which they are automatically deleted. You can delete your images at any time via your gallery.

Support tickets — the stored chat conversation and the associated contact email address — are automatically deleted 90 days after creation, whether or not the ticket has been handled.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability. Requests can be submitted via info@zienklaar.nl. We respond within 30 days.

You can also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

7. Security

We apply appropriate technical and organisational measures: HTTPS encryption, encrypted databases and file storage, least-privilege access control, and regular security reviews.

8. Changes

We may update this policy from time to time. The current version is always available at zienklaar.nl/privacy, with the version number shown at the top of this page. Please check this page periodically.