Legal · last updated 1 July 2026
DPA
Read this first
Kwartaal provides guidance, estimates, and reminders. It is not tax advice, and Kwartaal does not file returns on your behalf. Figures are computed from published rates for the tax year shown, and Mijn Belastingdienst has the final word.
1. Roles
For the personal data you enter into Kwartaal, you are the data controller and Kwartaal B.V. is the data processor. This summary describes the terms available in full in our Data Processing Agreement — request the signed version at privacy@kwartaal.nl.
2. Sub-processors
Cloudflare (infrastructure, EU region), Stripe (payment processing), Resend (email delivery), and Sentry (error monitoring, optional). Each is bound by its own data processing agreement with Kwartaal B.V.
3. Security measures
Encryption in transit and at rest, tenant-isolated data access enforced at the database layer, audit logging of every mutation and export, and encrypted storage for any third-party integration secrets.
4. Data subject requests
Export and deletion are self-service from within the product (Settings → Your data / Account deletion). For anything the product doesn't cover, contact privacy@kwartaal.nl.