Privacy notice

Last updated 2026-10-12. Short version in NL/DE/FR at the bottom.

Who is responsible

Kagan Consulting (Kagan Serhan Ayik, sole proprietorship), Kerselaarlaan 12, 2220 Heist-op-den-Berg, Belgium, KBO/BCE 0748.634.023, e-mail serkvay13@gmail.com (controller under the GDPR).

What we process and why

Product data you enter (product name, description, materials, warnings you tick, and the manufacturer / importer / EU responsible person details). Purpose: generating your pack (contract, art. 6(1)(b) GDPR). Contact details of businesses can be personal data if they name a person – enter business contact details only.
Anonymous wallet token (random ID stored in your browser) holding your credit balance and the list of your packs. No account, no name needed.
Optional e-mail at checkout: passed to Mollie for the receipt; we store only a SHA-256 hash to let you restore your credits on another device.
Optional business details (company, VAT number, country) for the invoice (legal obligation, art. 6(1)(c)).
Payment data is processed by Mollie B.V. (Amsterdam); we receive the payment ID and status, never card or bank details.
Technical data: your IP address is used only as a SHA-256 hash in daily rate-limit counters (deleted after 2 days) to prevent abuse (legitimate interest, art. 6(1)(f)).

AI processing

For paid packs, the free-text fields product name, category, materials, description, your own instructions and care text are sent to OpenAI (API, “store: false”) to rewrite and translate them. Manufacturer, importer and responsible-person contact details are not sent to the AI. OpenAI may process data in the USA (EU Standard Contractual Clauses / EU-US Data Privacy Framework). The output is labelled as AI-generated (EU AI Act art. 50).

How long

Generated packs: deleted automatically after 30 days (or immediately with “Delete this pack”).
Wallet (credits, list of packs, e-mail hash): deleted automatically 365 days after the last purchase or use.
Payment records and invoice details: ~13 months in the app; invoices are kept by our accounting for the legally required period (Belgium: 7 years).
Rate-limit counters: 2 days. The draft form is saved only in your own browser (localStorage).

Processors

Cloudflare, Inc. (hosting and key-value storage), Mollie B.V. (payments), OpenAI (text generation, paid packs only).

Your rights

Access, rectification, erasure (“Delete all my data” in the app deletes your wallet and packs at once), restriction, objection and portability (the CSV export). Write to serkvay13@gmail.com. You can complain to the Belgian Data Protection Authority (dataprotectionauthority.be).

Cookies

No tracking or advertising cookies. We only use your browser's local storage for the wallet token, language and form draft.

NL – Wij verwerken alleen wat nodig is om uw pakket te maken; pakketten worden na 30 dagen automatisch verwijderd, de anonieme wallet 365 dagen na laatste gebruik. Contactgegevens van fabrikant/importeur gaan niet naar de AI. Vragen: serkvay13@gmail.com.

DE – Wir verarbeiten nur, was für Ihr Pack nötig ist; Packs werden nach 30 Tagen automatisch gelöscht, das anonyme Guthaben 365 Tage nach letzter Nutzung. Kontaktdaten von Hersteller/Importeur gehen nicht an die KI. Fragen: serkvay13@gmail.com.

FR – Nous ne traitons que ce qui est nécessaire à votre pack ; les packs sont supprimés automatiquement après 30 jours, le portefeuille anonyme 365 jours après la dernière utilisation. Les coordonnées du fabricant/importateur ne sont pas envoyées à l'IA. Questions : serkvay13@gmail.com.