Privacy statement

Winvent Group B.V. is the data controller for everything that comes in through winvent.nl. We are registered with the Dutch Chamber of Commerce under number 42156298 and work from the Netherlands.

When you enter a web address, three things go to our own analysis service: that address, the language you are reading the site in, and your IP address. The service fetches the public pages at that address and writes the report with AI. This site does not keep that report and does not file it under your name.

The IP address travels along so we can limit the number of scans per visitor. This site counts them in a window of one hour and forgets them afterwards; the analysis service keeps a daily count of its own as well. Of the website you enter we read only what is public there.

Your report appears on screen straight away. If you also ask for it by email, your address goes to that same analysis service together with the scanned web address, and it is kept there so we can send the report once. A person sends it, not an automated sequence.

You are not added to a mailing list and we do not pass your address to anyone else. If you want it deleted, email us and it is gone.

What you send us is used to reply and to write a proposal if you ask for one. Nothing beyond that. WhatsApp runs through Meta, so what you send there sits on their servers too. If you would rather it did not, email or call instead.

The site runs on Vercel. Like any web server, theirs process your IP address to deliver the page and keep technical logs.

We measure visits with Vercel Web Analytics: how many people open which page. No tracking cookies, no advertising networks and no per visitor profile. There is no other measurement on this site.

When you open a page, our server looks up which organisation the network of your internet connection belongs to. No cookie is involved. For this lookup, ipapi.is processes the IP address transiently through a server in Germany. We do not keep the IP address itself. Only the organisation we found stays, for 90 days. The legal basis is legitimate interest: we want to know which organisations show interest so that we can approach them.

The scan counter forgets your IP address within the hour. An email address you leave for the report stays on file for as long as we need it to send the report and follow it up, and no longer. If you become a client, the agreement and the data processing agreement take over from that point.

You may see what we hold about you, have it corrected or deleted, and object to how it is used. We reply within one business day. If we cannot sort it out together, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

This statement covers winvent.nl. When we build a system for your business, the data in it is processed on your instructions: you are the controller, we are the processor, and we put that in a data processing agreement. Where possible such a system runs in your own accounts, and we do not train public models on your data.

Company Brain is the knowledge system we host for businesses: the employees of such a business search their own company's information in it and get answers that point to the document the fact comes from. The business is the controller and Winvent Group B.V. is the processor; what we process is set out in the data processing agreement with that business and its source annex.

Each business has its own separate database at its own address. We never use the content for ourselves or for another business, do not sell it, do not share it and do not build profiles of people from it. The servers are at Hetzner in Germany. To produce an answer, the system sends the relevant passages to an AI model of our supplier (Anthropic, through Anthropic or Amazon Web Services), which processes them for that purpose only and does not train on them. At Anthropic this processing takes place in the United States, at Amazon Web Services in the European Union.

When a business connects its own WhatsApp Business number to Company Brain, we receive, through Meta's official WhatsApp Cloud API, a copy of the conversations on that number: the messages and attachments, the phone number and name of the other party, and, once at connection, the conversations of the preceding six months. Group chats are not included. We keep that copy in the database of that one business, so that its employees can search it in their own Company Brain. Nothing beyond that: we never send messages, and we do not read along with other businesses.

If you send a WhatsApp message to a business that uses this connection, your message is therefore also in that business's Company Brain. That business tells you so in its own privacy statement and tells Meta what it processes about you. Do you want to know what it holds about you, or have it corrected or deleted? Ask that business, or email us at info@winvent.nl. We pass your request on to that business within one business day, and we do the same with a request that reaches us through Meta.

We delete all WhatsApp data of a business within 30 days after the business disconnects, asks for deletion or ends the service, and sooner if Meta or the law requires it. All of this applies only to businesses that switched the connection on themselves; Winvent never uses any route other than the official API.