Privacy

What we process and why

We process case content, replies, files and third-party contact details to screen offers and prevent fraud. Our basis is legitimate interest in fraud prevention. Share only material you are authorised to process. Your organisation’s members can see its cases; other organisations cannot.

Fraud prevention and disputes

Scam reporting is optional and separate from sharing a case for testing. You can withdraw either choice from the case. Reports are reviewed privately. Personal details from reports stay within the organisation unless sharing is explicitly enabled. Official fraud warnings remain available to everyone.

Think you are listed by mistake? Ask us to review the finding.

Sharing choices

Personal names, personal email addresses, phones and bank accounts in user reports are matched only within the same organisation while personal sharing is off. Company names, company domains, vessel numbers and file fingerprints may match across organisations. Official warnings and the industry fraud blacklist remain global. An open dispute puts a user-reported listing under review; official warnings and sanctions are not hidden.

The optional duplicate-check network is off by default. When available, only organisations that contribute can receive cross-organisation matches. It shares document fingerprints, not raw identifiers or the other organisation’s identity.

Retention and deletion

Cases are retained for up to 24 months after their last activity and can be deleted by the organisation. Disputes are retained for 24 months. Organisation history is retained as an insert-only record. Inbound email bodies and attachments follow your shorter 90, 180 or 365-day setting; non-trade bodies expire after 7 days. Private sealed reports may retain a separate evidence bundle. Public verification reveals only fingerprint metadata.

Service providers

We use providers for hosting, private data storage, AI analysis and email delivery. They process data to provide the service, not to sell customer data. Provider names are available to administrators.

Your rights

You can ask for access, correction, deletion, restriction or export, and object to processing. Use the contact form linked below. You may also complain to the Dutch data protection authority. Dispute evidence and contact details are private and used only to handle the request.