Privacy policy

DGAI Studios is a trade name of Rybier Consulting, President Allendelaan 263, 1068 VM Amsterdam, registered with the Dutch Chamber of Commerce (KvK) under number 66637694, VAT NL001677588B25. We are the data controller for the processing described on this page. Contact: [email protected].

• Interest form. If you leave your email address on our pricing page, we store it with your message and use it to contact you about DGAI Studios. Legal basis: your consent. We stop as soon as you ask us to.
• Customer accounts and orders. When you buy a campaign or subscription we store your company name, contact email, VAT number and country to deliver the service and to invoice you. Legal basis: performance of a contract, and legal (tax) obligations for invoices.
• Campaign briefs and deliverables. The briefs you submit and the campaigns we generate for you are stored in your portal so you can access them. Legal basis: performance of a contract.
• Payments. Payments run through Mollie. We never see or store your full payment details.
• Portal login. We use single-use magic links sent to your email and a functional session cookie. No passwords are stored for customers.
• Abuse prevention. We rate-limit requests by IP address. These technical logs are short-lived and used only to keep the service available. Legal basis: legitimate interest.

Your campaign briefs are processed by AI models to generate your campaign: text by Anthropic (Claude) and visuals by fal.ai (FLUX). We send only what is needed to generate your deliverables. Under our API agreements these providers do not use your data to train their models. All AI-generated content is marked as AI-generated.

Our application runs on EU infrastructure: hosting by Scalingo (Paris, FR), database by Neon (Frankfurt, DE), file storage on Cloudflare R2 with EU jurisdiction, rate limiting and job queue by Upstash (EU region), analytics by Plausible (EU), email by Mailjet (FR), payments by Mollie (NL), invoicing by Jortt (NL), VAT-number validation by vatverify.dev. Two AI providers are US-based (Anthropic, fal.ai); transfers to them are covered by EU Standard Contractual Clauses.

We use Plausible Analytics, an EU-hosted, cookieless analytics service, to count visits to our marketing pages in aggregate. It sets no cookies, stores no personal identifiers, and builds no cross-site profiles; we only see aggregated counts per page. Legal basis: legitimate interest.

Invoice and order data: 7 years, as Dutch tax law requires. Interest-form data: until you unsubscribe or ask us to delete it. Campaign briefs and deliverables: for as long as you have an account, or until you ask us to delete them. Magic links are single-use and expire automatically.

We set one functional session cookie when you log in to the portal. Our analytics service (Plausible) sets no cookies at all, and we use no advertising or tracking cookies — so we do not show a cookie banner.

You can ask us for access to, correction of, deletion of, or a copy of your personal data, and you can object to or restrict processing. Email [email protected] and we respond within 30 days. You can also complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

If your briefs contain personal data of your own customers, we process that data only to generate your campaign. Need a data processing agreement (DPA) for your records? Email [email protected].

When this policy changes, we update this page and the date at the top. The current version always lives at https://dgai.studio/privacy.