Privacy
Privacy policy
You enter your information with us, so you should know exactly what we do with it, who sees it and how to get it removed. That is set out below, without legal detours. Last updated on September 28, 2026.
Controller
Who we are
Delta Six is the party that decides what happens with your data. In the law this is called the data controller.
This policy applies to deltasix.co. The same policy applies to deltasix.nl.
| Detail | Information |
|---|---|
| Name | Delta Six (VOF) |
| Chamber of Commerce (KVK) number | 99230577 |
| Address | Leeuwerik 34, 3299 BZ Maasdam, the Netherlands |
| info@deltasix.nl | |
| Website | deltasix.co (the same policy applies to deltasix.nl) |
Data we collect
What we record, and why
We do not collect more than we need. This differs per situation, so here it is case by case.
Showcase
When you request a free website showcase
On deltasix.co you fill in your name, your current website, your email address, your phone number and, if you wish, your preferences. With that information we build your website in advance and schedule the showcase.
- WhyTo build your website, to schedule the showcase with you and to contact you about the outcome.
- Legal basisYour consent, and our legitimate interest in offering our service to someone who asks for it themselves.
AI visibility scan
When you run the AI visibility scan
The AI visibility scan is offered on deltasix.nl, at deltasix.nl/ai-vindbaarheid. There you fill in your website, your name, your email address, the town or city of your business and, if you wish, your phone number. We then read your public website and put questions about your trade and your location to the AI assistants ChatGPT (OpenAI), Gemini (Google) and Claude (Anthropic), through their business API. In doing so we only send public business information: your business name, your website, your location and text from your website. Your name, email address and phone number stay with us.
- WhyTo create your report, to email it to you and to contact you about the outcome.
- Legal basisYour consent, which you give by ticking the checkbox in the form.
Your report is yours. We do not publish it under your name and we do not sell it. If we use results for research into AI visibility, we only do so anonymized and aggregated, so that nothing can be traced back to you.
Appointments
When you schedule an appointment
Your name, email address, phone number and the time you chose. We need these to make the appointment, to send you a confirmation and to remind you of it.
- Legal basisPerformance of what you ask us to do.
Clients
When you become a client
The data we need to deliver and to invoice: company details, contact person, Chamber of Commerce (KVK) number, VAT number, bank details and the agreements we make.
- Legal basisPerformance of the agreement, and for the invoices our statutory retention obligation.
Site visits
When you visit our site
We use our own software to measure how the site is used: which pages you view, where you came from, how far you scroll, what you click on, how long a video plays, which fields of a form you fill in and how fast the page loads. This is how we improve the site.
To count visits, at the moment of your visit we create a code from your IP address, your browser and a secret key that is replaced every day. We only store that code. We do not store your IP address itself anywhere, and the next day the same visitor is unrecognizable. What you type in a form only reaches us when you submit it yourself.
The measurement runs on our own server in the EU. We share the data with no one and use it exclusively to improve the site.
- Legal basisOur legitimate interest in having a site that works well. This is measurement with minimal consequences for your privacy, and that is why we do not ask for consent for it.
Contact
When you call or email us
What you send or tell us, plus your contact details. We only record conversations if we say so in advance and you agree.
Google Calendar
When you connect your Google Calendar
In our software at core.deltasix.nl you can connect your own Google Calendar. You do this yourself, through Google's sign-in screen. We never see your Google password and we only receive the access that you approve on that screen.
Permissions
What access we request
Only access to your calendar, through the Google Calendar API. Nothing else. We do not request access to your Gmail, your contacts, your Drive, your files or your location.
We deliberately request the narrowest permissions with which the work can be done. These are the permissions, exactly:
| Permission | What it is for |
|---|---|
| calendar.calendarlist.readonly | Showing the list of your calendars, so that you choose which ones count toward your availability and which calendar we write to. |
| calendar.freebusy | Only seeing when you are busy or free. No titles, descriptions, attendees, locations or attachments. |
| calendar.events | Creating, rescheduling and canceling the appointment that is booked through us, and having a Google Meet link created for it. |
| userinfo.email | Showing which Google account is connected, so that you can disconnect the right one. |
We do not request the broad permission auth/calendar, with which an app could share calendars, change permissions or delete entire calendars. That is not part of what we do.
Use of access
What we use that access for
- Checking availabilitySeeing when you are busy, so that an appointment is never booked on top of an existing appointment.
- Adding appointmentsPlacing a booked appointment in your calendar, together with the details of the person who requested it.
- Updating appointmentsUpdating or deleting that appointment if it is rescheduled or canceled.
Of your existing appointments we exclusively use the times, to calculate when you are free. We do not use the content of those appointments, meaning titles, descriptions, locations and attendees, for that purpose and we do not show it anywhere. We do not store more of your calendar than is needed for that calculation.
Limits
What we do not do
- No selling or sharingWe do not sell calendar data and we do not pass it on to other parties, except to the suppliers that run our software and that have a data processing agreement for that purpose.
- No ads or trainingWe do not use it for advertising, for profiling or for training AI models.
- No reading alongNo one at our company reads your calendar. The only exception is when you ask us for help with a malfunction yourself and give permission for that, or when the law obliges us to.
AI
Artificial intelligence
For the AI visibility scan we use the APIs of OpenAI, Google (Gemini) and Anthropic (Claude), as described above. By default, those suppliers do not use input from business API customers to train their models.
In Core, an AI agent can write a draft reply to an incoming message from a lead and, at that lead's request, schedule an appointment. For this we use one supplier: the Anthropic API (Claude), called directly, without an intermediary, gateway or model aggregator. By default, Anthropic does not use input and output from business customers to train models.
The only thing from your Google Calendar that can end up in such a request is the free times that follow from your availability, and only at the moment something is being scheduled. We do not read the content of your appointments and therefore cannot pass it on either. Data that we receive through Google APIs is never used or transferred, in raw, aggregated or derived form, to create, train or improve AI or machine learning models. We do not train any models ourselves.
Disconnecting
How to remove the connection
You can revoke the connection at any time. You can do so directly with Google, at myaccount.google.com/permissions, and you can also ask us at info@deltasix.nl. Once the connection has been revoked, we delete the access token and the calendar data retrieved with it within 30 days. Appointments that were booked through our system remain in our records, because that is our own registration and invoicing depends on it.
Limited Use. The use and transfer by Delta Six of information that we receive through Google APIs complies with the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Delta Six Core's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
No Google user data, raw, aggregated or derived, is used or transferred to create, train or improve any generalized or foundational AI/ML model.
Processors
Who else sees your data
Only parties that help us run the service. With each of them it has been laid down that they may use your data exclusively for us and not for themselves. In the law this is called a data processing agreement.
| What for | What it means |
|---|---|
| CRM and follow-up | Your request, your appointment and the messages you receive from us |
| Appointment reminders | Confirmations and reminders by email and WhatsApp |
| Website and hosting | The pages and forms themselves |
| Statistics | Our own software on our own server in the EU. No data goes to another company for this |
| Bookkeeping | Invoices. Our accountant processes these |
We do not sell your data. To anyone. We also do not pass it on to other companies, to competitors or to data brokers.
International transfers
Transfers outside the EU
Some suppliers are located outside the European Economic Area. When that happens, the data only goes to a party that is covered by a valid transfer mechanism, such as the standard contractual clauses of the European Commission. If you want to know exactly which parties are involved, email info@deltasix.nl and you will receive the list.
Retention
How long we keep it
| What | How long |
|---|---|
| Showcase request or AI visibility scan without follow-up | 12 months, then deleted |
| Appointments that did not take place | 12 months |
| Client data | As long as you are a client, plus 2 years |
| Invoices and records | 7 years. This is required by the Dutch Tax and Customs Administration (Belastingdienst) |
| Website statistics | A maximum of 13 months |
If you want your data removed sooner, that is possible. See below.
Your rights
What you can demand from us
These are not favors. This is in the GDPR and it simply applies.
- AccessRequesting what we hold about you.
- RectificationIf something is incorrect, we correct it.
- ErasureWe remove it. Except what we are legally required to keep, such as invoices.
- RestrictionTemporarily locked while something is being looked into.
- PortabilityYour data in a file that you take with you to another party.
- ObjectionAgainst use based on legitimate interest, and always against marketing.
- Withdrawing consentAt any time. What we did before that remains valid, after that it stops.
Email info@deltasix.nl and you will hear within 30 days what we have done. Usually much sooner. We first ask you to identify yourself, because otherwise we would be giving your data to someone else. It costs you nothing.
Complaints
If you think we are getting it wrong
Tell us first, and we will resolve it. If you cannot work it out with us, you may file a complaint with the supervisory authority. That is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl, and visitors from the UK or elsewhere may also contact their local data protection authority. You always have that right, even without having come to us first.
Cookies
Cookies
This site exclusively uses storage that is needed to make the site work, such as remembering a form that you are halfway through filling in.
For our statistics your browser only stores a temporary visit number. It expires as soon as you close your browser or do nothing for half an hour. There are no advertising cookies and no cookies from other companies on the site at all, so there is nothing to accept either.
Security
Security
The site runs over an encrypted connection. Only people who really need it for their work can access your data. If something goes wrong despite everything and you are at risk as a result, we are required to tell you and we will.
Automation
Automated decisions
The AI visibility scan automatically calculates a score, based on public answers from AI assistants and your public website. That is a measurement, not a decision with legal consequences for you. There is always a human involved before we do anything concerning you.
Minors
Children
Our service is for entrepreneurs and businesses. We do not target people under the age of 16 and we do not knowingly collect their data.
Changes
If this policy changes
Then we update this page and put the new date at the top. If it is a major change and you are a client, we will let you know. We do not quietly change the rules.