Legal · last updated 1 July 2026
Privacy
Read this first
Kwartaal provides guidance, estimates, and reminders. It is not tax advice, and Kwartaal does not file returns on your behalf. Figures are computed from published rates for the tax year shown, and Mijn Belastingdienst has the final word.
1. Scope
This policy covers the Kwartaal web app and marketing site. Kwartaal is GDPR-native: your data lives on EU infrastructure, is processed only to run the product, and is never sold or used to train models.
2. What we store
Your account email, business profile (legal form, KOR status, registration date), the tax figures you enter (income, expense, and hours records), receipt files, and billing metadata from Stripe. We practice data minimization by design: BSN and DigiD credentials are never requested, and free-text fields are validated to refuse them if detected.
3. Processors
Cloudflare (hosting, database, file storage — EU region), Stripe (payments), Resend (transactional email), and Sentry (error monitoring, optional). Each processes only what's needed for its function, under a data processing agreement.
4. Your rights
Export everything as a machine-readable zip at any time from Vault or Settings. Request account deletion from Settings — a full export is generated immediately, and your account and all data are permanently deleted 30 days later unless you cancel the request.
5. Analytics
Cookie-less, aggregate analytics only (or none) — no consent banner, because there's nothing to consent to.
6. Contact
Questions about this policy: privacy@kwartaal.nl.