Privacy statement
Last updated: 21 October 2026
1. Data controller
Mediasimpel (Chamber of Commerce no. 73133477, based at Paganinidreef 54, 2253SJ Voorschoten) is responsible for processing personal data as described in this statement. Questions? Email hello@mediasimpel.nl.
2. Data we process
- Contact and account details: name, email address, phone number and company name.
- Brand information you provide: logo, colours, images and website details.
- Order and payment details: what you order, amounts, payment status and authorisation.
- Project and communication details needed to deliver the work.
- Social Studio content, publishing plans and connected social media accounts.
- Technical details such as IP address, device and basic usage data.
- Conversations with Mesi, our assistant: your questions and Mesi's answers on the website, in the studio and in your account, with the page you asked them on. When you are signed in, we link the conversation to your account; otherwise to a random visitor number for this device, until you sign in.
- Short notes Mesi makes to help you better later, such as a plan or preference you mention yourself. Never passwords, payment details or other sensitive data.
3. Why we use your data and our legal basis
We use your data to fulfil and invoice your order (performance of a contract), stay in touch and improve our service (legitimate interests), provide integrations and AI features you explicitly choose (consent and/or performance of a contract), and meet legal obligations.
Mesi answers your questions and helps you put a package together (legitimate interests). In your account, Mesi retrieves your own data, such as orders, invoices, subscription, project status and your website figures, to answer your question (performance of a contract). Mesi only sees the data of the account you are signed in with and changes nothing unless you press a button. We keep conversations so you can see them again in your account, so our team can help you further, and to improve Mesi.
4. Processors we use
- Google Firebase, for hosting, database and accounts.
- Mollie, for payments and direct debits.
- Resend, for transactional email delivery (confirmations).
- Anthropic (Claude), Google (Gemini) and NVIDIA, for AI text processing when you use an AI feature or talk to Mesi. Mesi only sends what is needed to answer your question. We use business API access with settings under which these providers do not use your data to train their models.
- fal.ai, for AI image processing when you use an image feature.
- Our own website analytics: aggregated pages, traffic sources, devices, campaigns and actions. We do not store form content or full URL query strings in this measurement. Daily visitors are estimated using a technical identifier that changes each day; no tracking cookie is used.
- Google Analytics / Tag Manager and Microsoft Clarity, if connected. These scripts load on public pages only after appropriate consent. Clarity may record usage sessions; privacy settings and masking are managed per connected project.
- Meta and LinkedIn, only when you connect a social media account yourself.
We have or will enter into data processing agreements with these parties. Data is processed within the EU or protected by appropriate safeguards elsewhere.
5. How long we keep data
We do not keep data longer than necessary. We retain records subject to a tax retention obligation for up to 7 years. Account, brand and Social Studio data is kept while your account exists or while it is needed for an active assignment. Temporary OAuth data is kept only to provide the relevant integration.
We keep conversations with Mesi and the related website help log for 12 months; after that they are deleted automatically. Mesi's notes are kept until you or we delete them, or until you delete your account. On your own device, the studio keeps a draft of the package you are putting together for at most 30 days.
Packages you put together with Mesi are kept on your account so you can find them on any device; they are deleted automatically after 12 months without changes.
6. Your rights
You can access, correct, delete or restrict your data, request a copy, and object to processing. In My account, you can download an export of your data and delete your account. You can also email a request to hello@mediasimpel.nl. When an account is deleted, we erase your login, profile, brand files and Social Studio data; financial records that must be retained by law may be kept for up to 7 years. You can see your conversations with Mesi and what Mesi noted about you in your account, and delete them there; they are also deleted when you delete your account. You can lodge a complaint with the Dutch Data Protection Authority.
7. Security and international transfers
We restrict access to personal data, encrypt traffic and encrypt sensitive social media tokens at rest. If a processor handles data outside the European Economic Area, we use an appropriate transfer mechanism and additional safeguards where required.
8. Cookies and consent
Use the cookie banner to choose which categories of cookies we may use. Necessary cookies for the site and your account are always on. We place analytics or marketing cookies only with your consent. You can change your choice at any time through Cookie settings at the bottom of the page. The cookie statement lists the cookies and local storage we use.
9. Changes and contact
We may update this statement when the app or its providers change. The date above shows the latest update. Send questions or privacy requests to hello@mediasimpel.nl.