Skip to content

Privacy statement

Version 2026-11-13

This privacy statement explains which data ZZPboek processes, why, for how long, and which rights you have. The Dutch version prevails.

1. Who we are

ZZPboek is a service of Serbo Solutions, Frederik Hendrikstraat 120-2, 1052 JC Amsterdam, the Netherlands, Chamber of Commerce (KvK) 96481323, e-mail support@zzpboek.nl.

  • For your account data we are the controller.
  • For the data in your administration (for example the names of your clients and suppliers) you are the controller and we are the processor. The data processing agreement applies to that.

2. Which data

  • Account: e-mail address, password (stored only in encrypted form), company name, KvK and VAT number, address and IBAN if you fill them in, the accepted version of the terms and the timestamp.
  • Administration: invoices, purchases, receipts and other documents you upload, bank transactions you import, contacts, hours and trips.
  • Technical: login times and error messages needed to run the service safely.
  • Support reports and technical error data: the type and text of a report you send with "Report a problem", an optional screenshot, and with it the page (without ids), app version, browser and operating system, screen size, language and time; for errors in the app: the error name, a shortened message without e-mail addresses or long numbers, the page and the app version. No bookkeeping content is included: no amounts, names, invoice numbers, IBANs or form values.

3. Purpose and legal basis

  • To provide the service and manage your account (performance of the agreement).
  • To comply with the law, such as the fiscal retention duty for our own invoices to you (legal obligation).
  • To secure the service and solve outages (legitimate interest).
  • To answer your support report and to find and fix errors in the app, using the support reports and technical error data (legitimate interest).
  • We sell no data and do not use your administration for advertising.

4. Who else processes your data

We use these sub-processors:

  • Supabase: database, file storage and login (servers in the EU). Contracting party: Supabase Pte. Ltd. (Singapore). Safeguard: standard contractual clauses (SCCs).
  • Anthropic: reading a document you upload in the scanner. The document is read only to suggest fields, never to train AI models. Contracting party: Anthropic Ireland, Limited (Ireland). Safeguard: standard contractual clauses (SCCs).
  • Resend: sending e-mails about your account, such as a link to reset your password. Contracting party: Plus Five Five, Inc.; processing in the United States. Safeguard: standard contractual clauses (SCCs) and the EU-U.S. Data Privacy Framework.
  • Stripe: processing subscription payments. Contracting party: Stripe Payments Europe, Limited; transfer to Stripe, LLC in the United States. Safeguard: the EU-U.S. Data Privacy Framework, otherwise standard contractual clauses (SCCs).

If a sub-processor processes data outside the EU, that happens only with the safeguards the GDPR requires.

5. How long we keep data

  • We keep your data as long as your account exists.
  • After your account ends you can still export your data for 30 days. After that we delete your account and your administration within 30 days.
  • Data stays in the backups until that backup is replaced (at most 12 months).
  • Technical error data is deleted after 90 days, support reports and their screenshots after 12 months, and both when your account is deleted.
  • We keep our own invoices to you for 7 years (fiscal retention duty).
  • The fiscal retention duty for your own administration stays with you. Export your administration in time.

6. Security

  • Connections are encrypted (https). Each user sees only their own data.
  • The backups are encrypted.
  • You can turn on two-step verification.

7. Cookies and local storage

ZZPboek sets no tracking cookies, uses no analytics services and loads no third-party scripts. That is why there is no cookie banner. The app only keeps what it needs to work in your browser: your login session, your language choice and the state of your first steps.

8. Your rights

  • You may view, correct, delete and export your data.
  • You may object to a processing.
  • Send your request to support@zzpboek.nl. We answer within one month.
  • Do you disagree with how we handle your data? Then you can file a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

9. Changes

We may change this privacy statement. We announce a change at least 30 days in advance, in the app and by e-mail.