← Back
Privacy Policy
RapidResident · Last updated: March 2026
1. Data controller
RapidResident is the data controller for personal data processed through rapidresident.com. For privacy matters, contact us at info@rapidresident.com.
2. What data we collect
- Account data: name, email address, role, subscription status
- Billing data: name, email, VAT number (if B2B). Payment data is processed by Mollie — we do not store card numbers or IBAN details.
- Usage data: questions answered, practice session statistics, progress data
- Technical data: IP address, browser type (via Vercel hosting)
- Analytics: page views and events via Google Analytics 4 (anonymised)
3. Legal basis
- Account and billing data: performance of a contract (Art. 6(1)(b) GDPR)
- Analytics: legitimate interest (Art. 6(1)(f) GDPR)
- Marketing emails: consent (Art. 6(1)(a) GDPR)
4. Retention periods
- Account data: retained until account deletion
- Invoice data: 7 years (Dutch tax law obligation)
- Usage/progress data: retained for the duration of the account
5. Third parties
- Supabase — database and authentication (EU-hosted)
- Mollie — payment processing (Netherlands, PCI-DSS compliant)
- Vercel — hosting (EU region available)
- Resend — transactional email delivery
- Google Analytics 4 — anonymised usage analytics
6. Your rights (GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your account and data
- Object to processing based on legitimate interest
- Data portability
To exercise these rights, email info@rapidresident.com. We will respond within 30 days.
7. Cookies
We use functional cookies for authentication (Supabase session) and analytical cookies via Google Analytics 4 (anonymised, no cross-site tracking).
8. Contact and complaints
Privacy questions: info@rapidresident.com. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.