Privacy Policy

1. Introduction

This Privacy Policy describes how Fieldgyde (a trade name of the sole proprietorship located at Koolemans Beynenstraat 10, 6521EV Nijmegen, the Netherlands, Chamber of Commerce: 53592085) collects, uses, and protects personal data. Fieldgyde is the data controller within the meaning of the General Data Protection Regulation (GDPR).

2. What data we collect

2.1 Account data

During registration, we collect your email address. This is necessary to create and manage your account.

2.2 Usage data

We collect the information you enter when generating interview scripts, including research questions, context, and other input. The generated scripts are also stored.

2.3 Technical data

We collect technical data such as IP address, browser type, and device information through our hosting provider for the operation and security of the Service.

2.4 Analytical data

We may use analytics services to gain insight into the use of the Service. If we place cookies for this purpose, we will ask for your consent in advance.

3. Purposes and legal bases

We process your personal data for the following purposes:

Purpose	Legal basis
Creating and managing your account	Performance of a contract
Generating interview scripts	Performance of a contract
Processing payments	Performance of a contract
Sending transactional emails (confirmations, password reset)	Performance of a contract
Analyzing and improving the Service	Legitimate interest
Sending newsletters and marketing	Consent
Inviting you to participate in user research	Legitimate interest
Securing the Service and preventing fraud	Legitimate interest

4. Sharing with third parties

We share your data with the following categories of recipients:

4.1 AI service providers

To generate scripts, we use external AI services (large language models). Your input data is processed by these services. We reserve the right to switch AI providers at our discretion to ensure the best possible quality.

4.2 Payment processor

Stripe processes your payments. We do not store payment data ourselves. Stripe is an independent data controller for payment data. See Stripe's privacy policy at stripe.com/privacy.

4.3 Hosting and infrastructure

Railway provides hosting for the Service and the database where your data is stored.

4.4 Email service

Resend handles sending emails on behalf of Fieldgyde.

4.5 Analytics services

We use Simple Analytics for website analytics. Simple Analytics is a privacy-friendly analytics service that does not place cookies and does not collect personal data. The data is stored in the Netherlands.

5. Transfers outside the EEA

Some of our service providers, including AI providers and Stripe, may be located outside the European Economic Area (EEA), particularly in the United States. When selecting service providers, we consider their privacy policies and the safeguards they offer for the protection of personal data.

6. Retention periods

Data	Retention period
Account data	As long as your account is active
Input data and generated scripts	As long as your account is active
Technical logs	In accordance with our hosting provider's policy

Upon deletion of your account, all your data is immediately deleted.

7. Cookies

Fieldgyde only uses functional cookies that are necessary for the operation of the Service, such as remembering your login session. We use Simple Analytics for website analytics, which does not place cookies. Therefore, you do not need to give cookie consent for analytics.

8. Your rights

Under the GDPR, you have the following rights:

• Access: You can request which data we hold about you.
• Rectification: You can have incorrect data corrected.
• Erasure: You can request deletion of your data.
• Restriction: You can request restriction of processing.
• Portability: You can receive your data in a commonly used format.
• Objection: You can object to processing based on legitimate interest.
• Withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise your rights, you can contact us at [email protected]. We will respond to your request within 30 days.

9. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

10. Age requirement

The Service is not intended for persons under the age of 16. We do not knowingly collect data from persons under 16. If we discover that we have collected data from a minor, we will delete it as soon as possible.

11. Changes

We may modify this Privacy Policy. Material changes will be announced at least 30 days in advance via email or through the Service. The date of the last modification is stated at the top.

12. Complaints

If you have a complaint about the processing of your personal data, you can contact us. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

13. Contact

For questions about this Privacy Policy or the processing of your personal data, you can contact us at:

Fieldgyde
Koolemans Beynenstraat 10
6521EV Nijmegen
The Netherlands
Email: [email protected]