What we do with your data

In short: as little as possible. We don't sell anything and don't send other companies' ads.

Last updated: 18 October 2026.

This is an English translation, offered to help you read along. The Dutch version of this privacy policy is the official one. If the English and Dutch texts differ, the Dutch text applies.

Taking part through your employer? Your employer sees whether you take part, and the team standings with your name, title and points. You can switch those off. Never what you read or what you fill in. Read how that works.

Who we are

inklaretaal is a newsletter service. It is provided by the general partnership (vennootschap onder firma, vof) inklaretaal. We decide what happens with your data. In the law that is called the data controller, and that's us.

Name: inklaretaal (vof)
Address: Edisonstraat 13, 1098 SZ Amsterdam
Chamber of Commerce (KvK) number: 42104394
VAT number: NL869750823B01
Email: info@inklaretaal.nl

Have a question about your data or about this policy? Email info@inklaretaal.nl. You always get an answer from a person.

What data we collect

Your email address: so we can send the newsletter.
Your name: only if you fill it in, so we can address you personally in the newsletter. May be left blank.
Your preferences: which newsletters and which level you choose, and anything you fill in yourself about your work (“what exactly do you do”) and your interests, so we send the right edition and the text fits your field better. Filling this in is allowed, but not required.
Your AI profile is entirely optional. You can fill in how much experience you have with AI, which AI tools and models you use, what you run into and what you want to learn. You can also add your own preference or instruction for your edition. You fill this in yourself on your account page and may leave everything blank. We use this information to tune the text better to your work.
Your progress in the Learning curve: which lessons you have finished and which AI terms we have already explained to you. That way you can pick up where you left off, and we don’t have to explain terms over and over.
How you found us: if you fill this in during signup, we keep your answer. That way we know how new readers find us. You may skip this question.
Payment details: these run through our payment partner. We do not store your card details.

Why we use them

We use your data only to deliver the newsletter, manage your subscription and improve the service. The legal basis is your consent (at signup) and, for the paid part, the contract you enter into with us.

Double opt-in

After you sign up we send one email with a confirmation link. Only when you click it are you really on the list. That way we know for sure it’s you.

Who we share data with

We never sell your data. We only share it with companies that help us run the service. In the law such companies are called processors. With each of them we make agreements about protecting your data (a processing agreement). With one exception: we have no such agreement with Google. Our calendar is in an ordinary Google account, and Google does not offer one for that. Google then uses the data under its own terms.

These are they, and what they do for us:

Resend: sends our emails and handles unsubscribing. Receives your email address.
Supabase: the secure database where we keep your account data and preferences. Supabase also handles logging in. The database is in Ireland, within the EU.
Stripe: processes your payment. We do not see or store your card details; they go straight to Stripe.
Vercel: hosts our website, so you can open the pages. Vercel also counts how many people view which page. No cookie is placed on your device for this and no profile of you is built. We see numbers, not people.
Sentry: gets a report when something goes wrong on the site. That report says what went wrong, on which page it happened and which browser you use. Your name and email address are not included. We only use these reports to find and fix errors.
PostHog: measures, with your consent, how visitors use our website (analytics cookies, see Cookies). Servers in the EU (Frankfurt).
Cal.com: lets you book a demo with us. It receives your name, your email address and the time you choose. Cal.com puts the appointment in our Google calendar.
Google: this is where our calendar is. If you book a demo, Google receives your name, your email address and the time.
GitHub: this is where the program runs that makes and queues the newsletter each week. While making it, the program briefly fetches your email address, first name and preferences to build and send your edition.
Anthropic: the AI company that helps us write the newsletter (see below).

What the AI does and doesn’t see

We use AI to write the text of the newsletter. That’s worth being honest about, so here is exactly what the AI does and doesn’t get.

The AI does not get:

your email address;
your payment details;
the list of who has signed up.

The AI does get:

the field and level of the edition (for example “healthcare, at the Practical level”);
your first name, if you filled it in, to address you personally in the edition;
your AI profile, if you filled it in. This may contain information about your experience with AI, the tools and models you use, your learning wishes and your own preference or instruction for the edition;
information about which AI terms you have seen before in your edition, so they aren’t explained again.

With this data we put together a small profile for each edition. We use that profile for one purpose: writing the text of your edition. We do not sell this data. Nor do we use it for advertising or to track you outside the newsletter.

Data outside the EU

Your account and preferences are in our database in Ireland, within the EU. Some of the other companies named above are based in the United States or store data there. Because of that, part of your data may end up outside the European Union. We make sure this happens safely and in line with the law. We arrange that in two ways:

through the EU-US Data Privacy Framework, an arrangement between Europe and the US that applies to American companies that have signed up for it; or
through standard contractual clauses, contracts approved by the European Commission that require your data to stay just as well protected as in Europe.

You don’t have to do anything for this yourself.

How long we keep your data

We don’t keep your data longer than necessary. Per type of data:

Your account and preferences: as long as your subscription runs. Want your data gone afterwards? Delete your account yourself on your account page (that works right away), or ask us by email and we’ll do it for you.
Invoices and payment details: 7 years. We are legally required to keep these for the Tax Administration (the fiscal retention obligation). We cannot deviate from this, not even on request.
Whether you opened an edition: we don’t track this at the moment. If we ever start measuring it to improve the newsletter, we will update this policy first.
Your own editions: as long as your account exists. Every edition you received stays on your own page, also when you stop a field. Delete your account and this archive is gone too.

Your rights

You’re in charge of your own data. You may:

access your data or request a copy;
have mistakes corrected;
have your data deleted (“right to be forgotten”), yourself on your account page, or on request (except data we’re legally required to keep, such as invoices);
ask to take your data to another service (data portability);
object to a particular use, or ask to temporarily restrict the use;
withdraw your consent: you can unsubscribe at any time, at the bottom of every email.

Want to use a right? Email info@inklaretaal.nl and we’ll arrange it, usually within a few days and at the latest within a month. Disagree with something? Then you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Taking part through your employer?

Sometimes an employer pays inklaretaal for a whole team. Then everything above applies to you too. And this is added:

What your employer sees: how many people from the team take part and how many lessons the team has finished together. For each colleague, your employer sees the email address and whether their access is on. That is needed to invite someone who does not take part yet.
The team standings: your employer and your colleagues see a list with the name, title and points of everyone who takes part. Before the standings start, everyone with a seat gets a mail two weeks ahead. Whoever joins later is in them as soon as they have points, and can switch them off right away. Points come from right answers to the eight questions (including the ones at your start), lessons you ticked off, weekly questions you answered, reactions to an edition and saved items. Nobody sees which of these your points come from. You can switch the standings off on your account page; then you are not on the list. Without a name filled in, you are on it as “Colleague”.
What your employer doesn’t see: what you read, which lessons you did, what you answered and what you saved. In the standings your employer sees your points and title, not where they come from.
The content stays ours: your employer pays for access, but doesn’t decide what’s in the newsletter.

Did we email you first?

Sometimes we approach an organisation ourselves, without them writing to us first. If you got such an email from us, this applies:

What we hold: your name, the organisation you work for, a work email address, a link to the page we found it on, and a short note on why we thought this would interest you.
Where we got it: from your organisation’s own website. We do not buy addresses and we do not guess them. If the address is not published on your own site, we do not email.
Why we may: we have a legitimate interest in explaining what we make to organisations it may be useful for (article 6(1)(f) GDPR). We weigh that against your interest. That assessment is written down and you may ask us for it.
How long we keep it: as long as the conversation is live, and never longer than 12 months after the last contact. If you say no, it is gone after 90 days. We then keep only your email address or your domain on a short list, precisely so you never get another email from us.
Not emailed yet? Sometimes an organisation sits on our list of possible contacts first, with a quote from their own page next to it. We keep that list for at most 24 months. After that it is gone, even if we never sent anything.
Did you fill in our form yourself? On the page for companies you can send us a message. We then keep your name, your email address, your organisation and your message for at most 12 months. After that it is gone, even if nothing came of it.
Did you book a demo? We keep your name, your email address and the time you chose for at most 12 months after the conversation. What Google keeps falls under Google’s terms.
Want us to stop? Reply to the email, or write to info@inklaretaal.nl. You do not have to give a reason. We delete your data and you hear nothing further from us.

Cookies

Our website sets functional cookies that are needed for it to work, for example to keep you logged in. We remember your cookie choice in your browser’s local storage. That is a small memory of your browser, on your own device. These need no consent.

With your consent, we also set analytics cookies from PostHog:

What:
- A random number in a cookie and in your browser’s local storage. The names start with ph_.
- The pages you visit and the steps you take on the site. For example signing up, choosing a field or paying.
- Your IP address. That is the number by which your device can be found on the internet.
- Which browser you use and what kind of device you have.
Your name and email address are not included.
Purpose: measuring how you use our website, so we can improve it. Not for advertising, and not to follow you across other websites.
Legal basis: your consent (Article 6(1)(a) GDPR and Article 11.7a of the Dutch Telecommunications Act). Without consent we do not load PostHog and set none of these cookies.
Retention: the cookie expires after 1 year. We keep the measurement data for at most 1 year.
Processor: PostHog, with servers in the EU (Frankfurt). We have a data processing agreement with PostHog.
Withdrawing: you can withdraw your consent at any time with the button below. We then remove PostHog’s cookies and stop measuring. Withdrawal applies from that moment on.

See also our terms. Questions? Contact us.