Privacy policy

1. About this privacy policy

KlusjeBij is a platform that connects neighbours in the Netherlands for local small jobs. Think gardening, cleaning, small repairs or doing groceries. To make that work, we need certain data from you. In this document we explain as clearly as possible what we collect, why, and what your rights are. If anything is unclear, you can always email privacy@klusjebij.app.

2. What exactly do we collect?

No more than necessary. Here is an overview:

• When you sign up: your email address and a password. If you only sign up for our newsletter, we only ask for your email address.
• On the platform: your name, profile photo and an indication of your location (postcode or neighbourhood), so we can show you jobs near you.
• Jobs and messages: the jobs you post, including any photos you add, your replies to jobs, and the messages you exchange with another user through the platform. Photos with a job are publicly visible, so don't include people or documents in them.
• Technical data: when you visit the website, our hosting provider (Vercel) logs the IP address, browser type and pages visited as standard. We use Vercel Analytics for anonymous visitor statistics; it sets no cookies.
• Usage data: with Microsoft Clarity we view anonymised recordings of how visitors click and scroll through the site, to find problems. What you type in forms is masked. You can refuse this via the cookie notice.
• Partner data: some pages contain links to partners (via the affiliate network Daisycon); if you click one, that network sets a cookie to attribute any purchase to KlusjeBij. You can manage your consent for this via the cookie notice shown on your first visit.

3. Why do we need that data?

In short: to run the platform and to keep you informed.

• We use your email address for messages about your own jobs and replies and, if you are a helper, to let you know when a new job has been posted. Every email has an unsubscribe link; in your profile you choose which emails you want.
• Location data is needed to match jobs near you. Without it we don't know which jobs are relevant to you.
• Visitor statistics help us understand which pages are popular, so we can improve the website. This is anonymised.

4. Who do we share data with?

Your data is not for sale. Full stop. We only share it in these cases:

• Other users: if you offer or take on a job, the other party sees your first name and reviews. Contact details are only shared after a match.
• Vercel (hosting): our website runs on Vercel servers in the EU. Vercel processes technical data on our behalf.
• Resend (email): we use Resend to send emails. They receive your email address solely to deliver our messages.
• Supabase (database and storage): our database and the photos with jobs are stored with Supabase on servers within the EU.
• Microsoft Clarity (usage analysis): processes anonymised session recordings and click data on our behalf. See the Microsoft privacy statement.
• Daisycon (partner links): if you click a partner link, Daisycon records that click with a cookie. We receive no personal data from this, only that a click came from one of our pages.
• Government or law enforcement: only if we are legally required to. This has never happened so far.

5. How do we protect your data?

All connections use HTTPS, so data is sent encrypted. Our database at Supabase is protected with row-level security, which means users can only access their own data. Passwords are stored hashed, so even we cannot see them. We also install updates regularly and check our code for known vulnerabilities.

6. Your rights under the GDPR

As an EU resident you have strong privacy rights. In short, they are:

• Access: want to know what we have stored about you? Send us an email and we'll send you an overview within 30 days.
• Correction: is your data wrong? Let us know and we'll fix it.
• Deletion: you can delete your account yourself under Profile. We then immediately erase your profile and your contact details. Messages and reviews you sent to others stay visible to them, but without your name (as "Deleted user"). Prefer email? Then we delete your data within 30 days, unless we are legally required to keep it longer.
• Objection: disagree with a particular processing of your data? You can object to it.
• Portability: you can request your data in a common format (JSON or CSV) to take it to another service.

For all these requests you can email privacy@klusjebij.app. We reply within 30 days. If we need more time, we will of course let you know.

7. How long do we keep data?

If you signed up for email updates earlier, we keep your email address as long as you are subscribed. If you unsubscribe, we delete your address immediately. If you have an account, we keep your data as long as your account is active. If you delete your account, we clear everything within 30 days. We keep transaction data for 7 years because the Dutch Tax Administration requires us to.

8. Cookies

We use functional cookies for authentication and the dark/light theme. Microsoft Clarity sets cookies for usage analysis; partner links via Daisycon only set a cookie when you click them. On your first visit our cookie notice asks whether you agree to analytics cookies. Vercel Analytics works without cookies and stores no personal data. You'll find more details on our cookie page.

9. Children

KlusjeBij is intended for users aged 16 and older. If data from someone under 16 has been collected by mistake, please contact us so we can delete it immediately.

10. Changes to this policy

If we change anything in this privacy policy, we update the date at the top. For major changes, for example if we bring in a new party that gets access to personal data, we will also let you know by email.

11. Complaint or question?

Running into something or have a question? Email privacy@klusjebij.app and we'll be happy to help. If we can't resolve it together, you have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).