What we do with your data

Two kinds of people

This page covers two very different groups, and mixing them up is where most privacy statements go wrong.

The first is you: the organiser. You made an account, you gave us your e-mail, you paid. We are responsible for what happens to that data.

The second is your bidders. They gave their name and e-mail to your club so they could bid at your evening. That data is yours; we only hold it for you and do nothing else with it. In legal terms: you are the controller and we are the processor.

What we hold about you, the organiser

Your e-mail address and, if you gave one, your name and the name of your organisation. What you set up: the auctions, the lots, the settings. Whether you paid, and for what — the payment itself runs through Mollie and we never see your card or bank details.

We keep this for as long as you have an account, and for seven years after an invoice because Dutch tax law requires it.

What we hold about your bidders

A name, an e-mail address, and optionally the name of a business they are bidding for. Their bids. Nothing else — no address, no phone number, no payment details.

We use it for exactly three things: to confirm the e-mail is theirs, to warn them when someone outbids them, and to tell them if they won. Never for anything else, and never passed to anyone.

You can delete the whole list of bidders for an auction in one click, and a bidder can ask you to remove their details. We will delete an auction and everything in it twenty-four months after it closes, unless you ask us to keep it longer.

Who else sees it

Supabase stores the database, in the European Union. Vercel serves the website. Resend sends the e-mails. Mollie handles the payments. Each of them only sees what they need to do that job, and each is bound by a processing agreement.

We do not sell data, we do not share it with advertisers, and there are no advertising trackers on this site.

Cookies

Only the ones that make the site work: one that keeps you logged in, and one that remembers a bidder so they do not have to confirm their e-mail again for every lot on the same evening.

No analytics that follow you around, so there is no cookie banner to click away.

What you can ask us

To see what we hold about you, to correct it, to delete it, or to get a copy in a file you can take elsewhere. Write to info@auctiontool.ai and you get an answer within thirty days — usually the same week.

If you think we are handling your data badly and we cannot sort it out together, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).