Privacy Policy

Data controller

ExpatRentalReady is the controller responsible for your personal data. You can reach us about anything in this policy at team@expatrentalready.com.

• Trade name: Expat Rental Ready (Eenmanszaak, registered in the Netherlands)
• KvK number: 06081853 · BTW number: NL002768046B68
• Address: Nieuwland 21, 1151 AX Broek in Waterland

How the dossier funnel handles your data

Our core service generates a rental dossier from the details you provide. Because this involves sensitive information, we've designed the funnel to keep as little of it as possible.

• We never store passport scans, payslips or bank statements. If you provide these to support a generated document, they are used only at generation time and then discarded. They are not retained on our servers.
• We store only what we need to deliver and account for the service: your name, email, intake answers, payment status and metadata about the dossier we generated for you.
• The optional online profile is opt-in only. If you choose to create one, it is automatically deleted after 90 days. If you don't opt in, no profile is created.
• Consent is collected at the payment and generation step, before any sensitive information is processed.
• What the AI sees — and doesn't. Your application letters are drafted by an AI model (Anthropic's Claude, accessed via OpenRouter) using only the answers you type into the form — such as your name, employer, income and the property you're applying for — and only at the moment you generate your dossier, so it can write the letter for you. No uploaded documents are ever sent to the AI: no passport or ID, no payslips, no bank statements — the service does not collect those. Anthropic does not use data sent through its API to train its models.

Processors we work with

To run the service we rely on a small number of trusted processors, each handling only the data needed for their function:

• Stripe — processes payments.
• Resend — delivers transactional email.
• Anthropic (Claude), accessed via OpenRouter — drafts your dossier from your form answers. It receives no uploaded documents, and Anthropic does not train its models on data sent through its API.

What personal data we collect

We collect personal data that you provide to us directly, including through our intake form or by email. This may include:

• Name and contact details (email address, phone number)
• Nationality and country of origin
• Employment details (employer name, contract type, income)
• Rental preferences (budget, preferred area, move-in date)
• Documents you share with us for service delivery (such as payslips, employment contract or ID). These are used only at the point of generating your documents and are not stored afterwards.

How we use your data

We use your personal data exclusively for:

• Service delivery — to provide the rental preparation services you have requested
• Communication — to respond to your enquiries and coordinate your intake process
• Invoicing — to issue invoices and account for services rendered

We do not use your data for marketing, profiling or automated decision-making. We do not sell your data, and we do not share it with third parties except the processors listed above or where required by Dutch law.

Legal basis for processing

We process your personal data on the following legal bases:

• Contract performance — processing is necessary to deliver the services you have requested (Article 6(1)(b) GDPR)
• Legitimate interests — for responding to enquiries and improving our services (Article 6(1)(f) GDPR)
• Consent — collected at the payment and generation step before sensitive information is processed
• Legal obligation — where required by Dutch law (e.g. for tax records)

Data retention

We retain your personal data only for as long as necessary to deliver our services and comply with legal obligations.

• Sensitive documents (passport scans, payslips, bank statements) are not stored at all — the dossier is built only from the answers you type into the form.
• An optional online profile, if you opt in, is automatically deleted after 90 days.
• Payment: we never store your card details. The €5 payment is processed by Stripe; the payment data is held by Stripe under its own terms. We keep only what Stripe records for that transaction.

Your rights under GDPR

As a resident of the EU/EEA, you have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data where there is no legal basis for continued processing
• Right to restriction — request that we limit how we use your data
• Right to data portability — request your data in a machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, please contact us at team@expatrentalready.com. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies and website analytics

This website may use cookies for basic functionality. We do not use tracking cookies or third-party advertising cookies. If we use analytics tools, they are configured to anonymise IP addresses and comply with GDPR.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Sensitive documents are handled only at generation time and are not stored on our servers afterwards.

Changes to this policy

We may update this privacy policy from time to time. The most current version will always be available on this page, with the date of last update shown at the top.

Contact

For any questions about this privacy policy or how we handle your data, please contact team@expatrentalready.com.