Legal

Privacy statement

Last updated: August 2, 2026

1. Introduction

Omcircle (“we”, “us”) attaches great importance to protecting your personal data. This statement explains which data we collect, why we collect it and how we handle it. We process personal data in accordance with the General Data Protection Regulation (GDPR).

2. The contact form

When you send a message through our contact form, we process:

We may also collect limited, anonymised technical data (such as browser type) to keep the website working properly.

3. The AI opportunity scan

If you request an AI opportunity scan, we process your name, your email address, the website you enter and the optional note you type in yourself. When you confirm, we also record the time and your IP address as evidence that you gave consent.

Legal basis. For sending you the scan, that basis is your consent (article 6(1)(a) GDPR). You give that consent by clicking the confirmation link in the email. If you do not, nothing happens: we do not read your site, we do not send a scan, and we delete your request within 24 hours.

For reading the website you entered, we rely on our legitimate interest (article 6(1)(f) GDPR). Because we require your email address to be on the same domain as the site you have scanned, it is always a site you are connected to yourself.

What we read. Only publicly accessible pages of the website you entered, up to a maximum of twelve pages per scan. What we take from them is the structure of the site: which tools are running, which forms are present, which pages exist and which are missing.

What we do not do. We do not log in anywhere and we do not look at anything that is not publicly on the site. We do not search social media. We do not process names or other details of your staff, even if they appear on the site.

The retrieved text. We keep it for at most 30 days, purely so we can check whether our analysis is correct. After that the system deletes it automatically. The analysis itself works on characteristics we derive from the pages (which tools are running, how many fields a form has), not on the page text itself.

Withdrawing consent. You can withdraw your consent at any time by getting in touch. We will delete your data straight away.

4. Why we process this data

5. How long we keep your data

Data Retention
A scan request you do not confirm 24 hours, then deleted automatically
The text we retrieve from your website 30 days, then deleted automatically
The scan we send you 12 months, so we can look it up if you get in touch about it
Your name, email address, domain, note and consent record 12 months
Messages through the contact form As long as needed to handle your question

6. Sharing with third parties

We never sell your data. To deliver the service we use a number of parties, each of which may only process what its own part requires:

Party For what Location
Formspree Processing the contact form United States
Resend Sending the confirmation email and the scan United States
Firecrawl Retrieving the public pages of the site you entered United States
OpenAI Analysing the characteristics read from the site United States
Supabase Storing your request, your consent and the scan European Union
Railway Running the scan European Union

We conclude a data processing agreement with all of these parties. For parties outside the European Union we use the standard contractual clauses of the European Commission. With OpenAI we have switched data retention off and training off.

7. Security

We take appropriate technical and organisational measures to protect your data against loss or unlawful processing.

8. Your rights

You have the right to access, correct or delete your data. You can also object to the processing and withdraw your consent. Get in touch with us to do so.

9. Contact

Questions about this statement or about your data? Get in touch through the contact form on our website.

10. Data controller

Omcircle
Gentiaanstraat 23
9731 BN Groningen
Netherlands

Chamber of Commerce: 91549264
VAT ID: NL004899208B06

This is a translation of the Dutch original. In case of any discrepancy, the Dutch version prevails.