Privacy statement

Who we are

ZZP Desk is a product of AaMa Development. We are responsible for the data in this statement, except data about your clients (see Data about your clients).

AaMa Development
Westerdorpsstraat 73
3871 AV Hoevelaken, the Netherlands
KvK (Chamber of Commerce) 42066321
abdulrahman.abdulqawi@aamadev.com

What we keep and why

Your account

Your name, email address, password (only as an unreadable hash), passkeys and two-step sign-in settings. Needed to sign you in and protect your account.

Your business details

Business name, address, KvK number, VAT ID and IBAN. They go on your invoices and into your VAT return.

Your records

Clients, projects, hours, invoices, credit notes, receipts, bank statements and VAT returns. That's what ZZP Desk is for.

Your subscription

Your plan, its status and your customer number at Stripe. You enter your card or bank details at Stripe; we never see or store them.

Email

Messages ZZP Desk sends: confirming your email address, resetting your password, and invoices and reminders you send to your clients.

Technical data

IP address, time and error reports. We use them to limit sign-in attempts, spot misuse and fix problems. Error reports contain no names, cookies or data you entered.

We use this data because it's needed to provide the service you signed up for, because the law requires us to keep our own invoices, and, for technical data, because we have a legitimate interest in a secure service.

Data about your clients

When you put data about other people into ZZP Desk, such as your clients' contact people, you are responsible for it and we process it on your behalf. We use it only to run ZZP Desk for you. The agreements on this are in article 13 of the terms.

Who else handles your data

We work with these companies. Each gets only what it needs for its task.

We send Anthropic only the receipt file. Anthropic doesn't use it to train models and keeps it only briefly. You check what Claude reads before it counts.

For part of its work Stripe is itself responsible, for example to prevent fraud. See Stripe's privacy policy.

When data goes to the United States, this is based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

When you file a VAT return through ZZP Desk, it goes to the Belastingdienst (the Dutch tax authority) through Digipoort. That happens only when you click Submit.

Cookies

This website uses no cookies. The app uses one cookie to keep you signed in, for at most 14 days after your last visit, and remembers in your browser whether you prefer light or dark. Both are needed for the app to work, so we don't ask for consent.

How long we keep data

• Your account and records: as long as your account exists. If you ask us to delete your account, we do so within 30 days. It's gone from backups within 90 days.
• Our invoices to you and your payments: 7 years, because the law requires it.
• Technical data: at most 90 days.

You also have to keep your own records for 7 years. Download your invoices and the accountant export before you have your account deleted.

Security

Connections are encrypted. Passwords are stored only as a hash. You can sign in with a passkey or turn on two-step sign-in. Each workspace is kept apart from the others, sign-in attempts are limited, and we make regular backups.

Your rights

You may see your data, have it corrected or deleted, have its use restricted, object to its use, and take it with you. Much of this you do yourself in the app: change your details, download invoices and make the accountant export. For the rest, email us; we reply within a month.

If you disagree with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens. We'd like to hear it first.

Changes

When something changes, we update this page. We also tell you about important changes by email.