Who we are
OwndUp offers smart, shareable lists that warn you in time. In this privacy statement we explain which personal data we process when you use OwndUp, why we do so and what rights you have. We handle your data with care and process it in accordance with the General Data Protection Regulation (GDPR).
What data we process
Account data
When you create an account, we process data such as your name, email address and, if you sign in with Microsoft 365, the basic details of your Microsoft account. We need this data to create your account and give you access.
List content
The lists, columns, rows and reminders you create in OwndUp are stored for you so you can consult, share and edit them. You determine this content yourself. We do not use the content of your lists for any purpose other than providing the service.
Usage data
To keep the service reliable and secure, we process technical data such as sign-in events, device and browser information and error messages. We use this data for security, support and improving OwndUp.
What we use your data for
We process your data to:
- provide and manage your account;
- store, display and share your lists as you set them up;
- warn you in time via the reminders you link yourself;
- keep the service secure, stable and working;
- support you when you contact us.
We do not sell your data and do not use the content of your lists for advertising.
Where we host your data
The application, the database and the backups run at TransIP in the Netherlands, and therefore within the European Union. If, for a specific processing operation, data would go outside the EU, we ensure appropriate safeguards such as the European Commission's standard contractual clauses. Which service providers that may involve is set out on our subprocessors page.
How long we keep your data
We keep your data for as long as you have an active account. If you cancel, we keep your data available for another 30 days so you can export it. After that we email your admins the date on which we will delete, and 30 days later we remove your personal data and the content of your lists from the production environment. Copies in backups disappear along with the normal backup cycle and are gone at most 120 days later. Billing data is kept for seven years, under the statutory tax retention period.
Processors
We engage carefully selected service providers who process data on our behalf, for example for hosting, email delivery and payment processing. We conclude data processing agreements with these processors, so that your data is also well protected with them. Who they are and where they are located is kept up to date on our subprocessors page.
Data processing agreement with your organisation
If we process personal data on behalf of your organisation, we are the processor and you are the controller. That calls for a data processing agreement, as article 28 of the GDPR requires. We have a standard version for it, for customers on Business and Continuity. Request it at hello@owndup.com and we will send it ready to sign.
Document extraction (AI)
When you use the optional "Upload PDF with AI" feature, the document you upload is sent to Mistral AI, a European provider based in Paris, which reads it and returns the recognised fields. We do not store the document itself: it is processed in memory and deleted immediately after extraction. Only the fields you confirm are saved, as a normal row. Mistral processes the data within the EU, does not use it to train its models, and keeps it for at most 30 days for abuse monitoring before deleting it. Extraction is best effort, so you always review and confirm the result before it is saved. If you would rather not use it, you simply don't: the feature stays off until you choose to upload a document.
See all our subprocessors, including Mistral →
Cookies
We use functional cookies that are necessary to make OwndUp work, and where applicable analytical cookies to improve the service. You can manage your preferences via the cookie banner on our website.
Your rights
Under the GDPR you have, among other things, the right to access your data, correction, deletion and portability. You can always export your data and the content of your lists yourself. If you want to exercise one of these rights or have a question about your privacy, please contact us. You also have the right to lodge a complaint with the Dutch Data Protection Authority.
Contact
Questions about this privacy statement or about your data? Email us at hello@owndup.com. We respond as soon as possible.