Privacy policy
Last updated 20 October 2026
This policy explains how Proxygate B.V. handles personal data for Riddance, the app Riddance - Field and this website.
1. Who is responsible
The controller is Proxygate B.V., Nassaukade 27-3, 1052 CJ Amsterdam.
Privacy questions: privacy@riddance.io.
When a company (your employer) sets up the app for its staff, that company is responsible for the data about its customers and work, and we act as processor. For user account data and for this website we are the controller.
2. What data we process
- Account data: name and work email address, role and organisation.
- Login and security data: login events, time, IP address and the email code used (only as an encrypted or expired value).
- Location at a visit: when you tap I am here in the app, the app records your location at that moment to confirm your arrival at the address.
- Photos you take or add in the app to a visit or work order.
- Device data: device type, operating system, app version and error reports.
- Data you or your organisation enter, such as customers, locations, visits, work orders and signatures.
- Waitlist on this website: only your email address and the page language.
3. What we use it for
Legal bases: performance of the contract, legitimate interest (security and continuity), legal obligation and consent (waitlist). We do not sell personal data and do not use it for third-party advertising.
- Providing the service: logging in, planning, carrying out and reporting work.
- Security, fraud prevention and fixing faults.
- Answering support questions.
- Improving the product with usage statistics under a pseudonym (legitimate interest).
- Telling waitlist members about the launch (based on consent).
- Meeting legal obligations, such as tax record keeping.
4. Processors and where data is kept
We work with the parties below. We sign a data processing agreement with each, and we tell the workspaces about a change in advance.
| Party | Purpose | Which data | Where |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting: database, files, app, logs and route planning | All workspace data | Frankfurt (EU) |
| MessageBird B.V. (Bird) | Email and SMS: sign-in codes, invitations, work orders | Name, email address, phone number, work order PDF | EU |
| Mapbox, Inc. | Address lookup and maps in the field app | The address typed, through our server; in the field app, the map area shown and the phone's IP address | US |
| 650 Industries, Inc. (Expo) | Push notifications to the field app, through Apple and Google | Device token; for a changed visit, the customer's company name and the day | US |
| Functional Software, Inc. (Sentry) | Error reports from the app and the website | Technical data with pseudonymous ids; no names, email addresses or IP addresses | Frankfurt (EU) |
| PostHog, Inc. | Product analytics: which screens and features are used | A pseudonym per user, workspace id, screen name without content; no IP address | Frankfurt (EU) |
| Resonate Labs B.V. (Reson8) | Dictation: speech to text. Only when switched on | Voice recording; the audio is not kept | Netherlands (EU) |
A party in the US only receives data with a GDPR safeguard: the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
When a user links their calendar (Google or Microsoft) or a workspace links its sensors (Zepta), data goes to that service at their own request and under their own terms with that service.
The company pays the subscription through Mollie B.V. (Netherlands). We are the controller for that.
This website and the waitlist: the website runs on Vercel, with servers in Frankfurt (EU). A waitlist sign-up is emailed to our team (Microsoft 365, EU) and kept in a contact list at Bird (EU), so we can email you at launch.
5. Retention
- Account and related data: while the account is active; erased within 30 days after deletion.
- Backups: 35 days.
- Login and security logs: 90 days.
- Waitlist: 12 months or until you unsubscribe.
- Financial records: 7 years (statutory tax retention).
6. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data under the GDPR (AVG), and to withdraw consent. Send a request to privacy@riddance.io; we reply within one month. See also the Delete account page.
You can lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch supervisory authority (https://autoriteitpersoonsgegevens.nl).
7. Cookies and tracking
This website uses no cookies and no analytics or advertising services. The app only stores what it needs to keep you logged in and to work offline.
In the web app we measure with PostHog which screens and features are used. This happens without cookies, under a pseudonym, and without IP address, names or what you type. It is on for a workspace that signs up by itself. The owner or an administrator can switch it off, and you can switch it off for yourself. We follow Do Not Track and Global Privacy Control.
8. Security
We take appropriate technical and organisational measures, such as encrypted connections, per-organisation access separation and logging.
9. Changes
If something material changes we update this page and the date at the top. Contact: privacy@riddance.io.