Privacy Policy
This Privacy Policy explains how RAMIN Sales handles personal data. It applies to visitors to this website, customers using the service, and individuals whose data is processed via the service on behalf of our customers.
1. Who we are
Controller: Betty B.V., trading as RAMIN.World (RAMIN Sales).
KvK number: 70164444
BTW number: [BTW NUMBER]
Registered office: Lebretweg 72, 6861 ZZ Oosterbeek, Netherlands
Contact: info@samen.ai
For data processed on behalf of customers (e.g. leads, message content), the customer is the controller and RAMIN Sales acts as processor under a written data processing agreement.
2. What we collect
- Account data — name, work email, company, role.
- Billing data — billing address, VAT number, payment method (last 4 digits only; full card data is handled by Stripe and never touches our servers).
- Service usage — login events, feature use, audit logs, error reports.
- Support and communications — emails and chat you send us.
- Website analytics — aggregated, privacy-preserving traffic data (no third-party advertising cookies).
3. Why we process it (legal basis)
- To perform the contract — provide and bill for the service.
- Legitimate interest — protect against fraud and abuse, secure the service, improve product quality from aggregated usage data.
- Legal obligation — comply with tax, accounting, and other statutory duties.
- Consent — where required, for example for marketing emails (which you can opt out of at any time).
4. Sub-processors
We use the following sub-processors to deliver the service. Each is bound by a data processing agreement and provides appropriate safeguards for any international transfers (typically the EU Standard Contractual Clauses).
| Sub-processor | Purpose | Location |
|---|---|---|
| Platform infrastructure partner | Underlying platform (agents, CRM, channel connectors) | EU |
| Microsoft Azure | Hosting and CDN (Static Web Apps, Functions, Application Insights) | West Europe |
| Stripe Payments Europe Ltd | Payment processing and subscription billing | Ireland / EU |
| [Email provider — e.g. Resend] | Transactional email delivery (receipts, welcome emails, support) | EU |
| [Analytics provider — e.g. Plausible] | Privacy-preserving website analytics | EU |
We will notify customers in advance of any change to this list. The named identity of each sub-processor is available on request at info@samen.ai.
5. How long we keep data
- Account and usage data — for the duration of your subscription, then up to 30 days after termination, after which it is deleted or anonymised.
- Billing and tax records — retained for 7 years to comply with Dutch tax law.
- Support communications — up to 2 years.
- Marketing consent — until you opt out, then removed within 30 days.
6. Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you,
- request correction of inaccurate data,
- request erasure where there is no overriding legal basis,
- request restriction of processing,
- object to processing based on legitimate interest,
- request data portability,
- withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email info@samen.ai. We will respond within 30 days. If you believe your rights have not been respected, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
7. Security
We use TLS for all traffic, encrypt data at rest, restrict employee access on a need-to-know basis, and follow industry-standard security practices. Card data is handled by Stripe under PCI-DSS Level 1.
8. Cookies and tracking
This site uses only strictly necessary technical storage (e.g. to remember whether you have seen the intro overlay during a session). It does not use third-party advertising cookies. If we add privacy-preserving analytics (such as Plausible), no personal data is collected and no consent banner is required under EU rules.
9. International transfers
Most processing happens inside the European Economic Area. Where a sub-processor (such as Stripe) operates infrastructure outside the EEA, transfers are protected by the European Commission's Standard Contractual Clauses or an equivalent valid transfer mechanism.
10. Changes to this policy
We may update this policy from time to time. Material changes will be announced by email to active customers and posted here at least 30 days before they take effect.
11. Contact
For privacy questions or to exercise your rights, contact info@samen.ai.
Note for the reviewer: this draft is intended as a starting point for legal review by a qualified Dutch / EU privacy lawyer before public use. Confirm the sub-processor table reflects the final stack (name the actual email and analytics providers chosen, and decide whether to publicly name the platform infrastructure partner or keep it on-request). Add the BTW number once registered. Verify retention periods against your business needs and Dutch tax law.