Privacy policy

Last updated: 23 October 2026

This is a translation. If the Dutch and English versions differ, the Dutch version prevails.

Who we are

mystreetwise is a trade name of Zential Pure, registered with the Dutch Chamber of Commerce (KvK) under number 96597569. Zential Pure is the controller for personal data processed on this site and in the app, as defined in the General Data Protection Regulation (GDPR).

Privacy contact: hallo@mystreetwise.com.

What we process

Account: your agency name, your name, your email address, your language and your password. The password is only stored as a scrypt hash, never readable.
Team: email addresses and names of colleagues you invite.
Client data you enter yourself: business name, address, location, logo, keywords, AI questions and the contact details you put in reports.
Measurements: Google Maps positions and AI platform answers, with public business data of the businesses found (name, address, rating, review count, categories). No reviewer names or review texts.
Payment: your Stripe customer and subscription IDs and your plan. Only Stripe sees and stores card and bank details, we do not.
Usage: your monthly credit usage, scans and reports.
Technical: a session cookie and the IP address of your connection (see below).

IP addresses and the free scan

The free scan works without an account. To prevent abuse we count per IP address how often the scan is used within 24 hours.

We do the same for login, signup and password reset, to limit password guessing and spam.

This IP address is only held in the server’s working memory, not in the database and not in our log files. It is gone by the next server restart at the latest.

If you leave your name and email address in the free scan, we store them to send you the report and email you about a trial. We do not use them for newsletters without your consent. You can ask us to delete them via hallo@mystreetwise.com.

The legal basis is our legitimate interest: protecting the service against abuse and limiting the cost of our data sources.

Why, and on what legal basis

To deliver the service you use: performance of the contract (Art. 6(1)(b) GDPR).
To invoice and keep our accounts: legal obligation (Art. 6(1)(c) GDPR).
To keep the service secure and prevent abuse: legitimate interest (Art. 6(1)(f) GDPR).
Service emails (password reset, invitations, alerts on a drop) are part of the service. We send no newsletter without your consent.

We do not sell data or use it for advertising. We make no decisions about you based solely on automated processing.

Processors

We work with these parties. With each we have a data processing agreement or that party’s standard data processing terms.

Fly.io (Fly.io, Inc., United States): hosting. The server and database run in the Amsterdam data centre.
DataForSEO (DataForSEO OÜ, Estonia): supplies Google Maps results and AI answers.
We pass on keyword, location, business name and the AI question; DataForSEO asks the AI platforms (such as ChatGPT). So do not put personal data in an AI question.
Resend (Plus Five Five, Inc., United States): sends our emails, such as password resets, invitations and alerts.
Stripe (Stripe Payments Europe, Ltd., Ireland): processes payments and subscriptions. For part of the payment data Stripe is a controller itself.

Where data goes to a country outside the European Economic Area, this is based on the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

Outside resources in your browser

The site loads fonts from Google Fonts. The maps in the app load map tiles from OpenStreetMap. Google and the OpenStreetMap Foundation see your browser’s IP address when that happens.

Cookies

We use one functional cookie: the session cookie that keeps you logged in (up to 30 days, or until you log out).

No analytics cookies, no tracking and no advertising cookies. No consent is needed for this.

Retention

Account and client data: as long as your account exists. After you cancel we delete it within 30 days.
Invoices and payment records: 7 years, as Dutch tax law requires.
Sessions: up to 30 days. Password reset links: 1 hour.
IP addresses for the limits: see above, no longer than the next server restart.

Security

All connections use HTTPS. Passwords are hashed. Each agency only sees its own data. Report links are long and random, and you can revoke them.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interest. Send your request to hallo@mystreetwise.com. We reply within one month.

If you disagree with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

Your clients’ data

When you enter data about your own clients, we process it on your behalf. You are the controller and we are the processor. Need a data processing agreement for that? Ask for one at hallo@mystreetwise.com.

Changes

When we change this policy, the new date is shown at the top. For major changes we email customers beforehand.