Privacy

Privacy policy

You enter your information with us, so you should know exactly what we do with it, who sees it and how to get it removed. That is set out below, without legal detours. Last updated on September 28, 2026.

Controller

Who we are

Delta Six is the party that decides what happens with your data. In the law this is called the data controller.

This policy applies to deltasix.co. The same policy applies to deltasix.nl.

DetailInformation
NameDelta Six (VOF)
Chamber of Commerce (KVK) number99230577
AddressLeeuwerik 34, 3299 BZ Maasdam, the Netherlands
Emailinfo@deltasix.nl
Websitedeltasix.co (the same policy applies to deltasix.nl)

Data we collect

What we record, and why

We do not collect more than we need. This differs per situation, so here it is case by case.

Showcase

When you request a free website showcase

On deltasix.co you fill in your name, your current website, your email address, your phone number and, if you wish, your preferences. With that information we build your website in advance and schedule the showcase.

  1. WhyTo build your website, to schedule the showcase with you and to contact you about the outcome.
  2. Legal basisYour consent, and our legitimate interest in offering our service to someone who asks for it themselves.

AI visibility scan

When you run the AI visibility scan

The AI visibility scan is offered on deltasix.nl, at deltasix.nl/ai-vindbaarheid. There you fill in your website, your name, your email address, the town or city of your business and, if you wish, your phone number. We then read your public website and put questions about your trade and your location to the AI assistants ChatGPT (OpenAI), Gemini (Google) and Claude (Anthropic), through their business API. In doing so we only send public business information: your business name, your website, your location and text from your website. Your name, email address and phone number stay with us.

  1. WhyTo create your report, to email it to you and to contact you about the outcome.
  2. Legal basisYour consent, which you give by ticking the checkbox in the form.

Your report is yours. We do not publish it under your name and we do not sell it. If we use results for research into AI visibility, we only do so anonymized and aggregated, so that nothing can be traced back to you.

Appointments

When you schedule an appointment

Your name, email address, phone number and the time you chose. We need these to make the appointment, to send you a confirmation and to remind you of it.

  1. Legal basisPerformance of what you ask us to do.

Clients

When you become a client

The data we need to deliver and to invoice: company details, contact person, Chamber of Commerce (KVK) number, VAT number, bank details and the agreements we make.

  1. Legal basisPerformance of the agreement, and for the invoices our statutory retention obligation.

Site visits

When you visit our site

We use our own software to measure how the site is used: which pages you view, where you came from, how far you scroll, what you click on, how long a video plays, which fields of a form you fill in and how fast the page loads. This is how we improve the site.

To count visits, at the moment of your visit we create a code from your IP address, your browser and a secret key that is replaced every day. We only store that code. We do not store your IP address itself anywhere, and the next day the same visitor is unrecognizable. What you type in a form only reaches us when you submit it yourself.

The measurement runs on our own server in the EU. We share the data with no one and use it exclusively to improve the site.

  1. Legal basisOur legitimate interest in having a site that works well. This is measurement with minimal consequences for your privacy, and that is why we do not ask for consent for it.

Contact

When you call or email us

What you send or tell us, plus your contact details. We only record conversations if we say so in advance and you agree.

Google Calendar

When you connect your Google Calendar

In our software at core.deltasix.nl you can connect your own Google Calendar. You do this yourself, through Google's sign-in screen. We never see your Google password and we only receive the access that you approve on that screen.

Permissions

What access we request

Only access to your calendar, through the Google Calendar API. Nothing else. We do not request access to your Gmail, your contacts, your Drive, your files or your location.

We deliberately request the narrowest permissions with which the work can be done. These are the permissions, exactly:

PermissionWhat it is for
calendar.calendarlist.readonlyShowing the list of your calendars, so that you choose which ones count toward your availability and which calendar we write to.
calendar.freebusyOnly seeing when you are busy or free. No titles, descriptions, attendees, locations or attachments.
calendar.eventsCreating, rescheduling and canceling the appointment that is booked through us, and having a Google Meet link created for it.
userinfo.emailShowing which Google account is connected, so that you can disconnect the right one.

We do not request the broad permission auth/calendar, with which an app could share calendars, change permissions or delete entire calendars. That is not part of what we do.

Use of access

What we use that access for

  1. Checking availabilitySeeing when you are busy, so that an appointment is never booked on top of an existing appointment.
  2. Adding appointmentsPlacing a booked appointment in your calendar, together with the details of the person who requested it.
  3. Updating appointmentsUpdating or deleting that appointment if it is rescheduled or canceled.

Of your existing appointments we exclusively use the times, to calculate when you are free. We do not use the content of those appointments, meaning titles, descriptions, locations and attendees, for that purpose and we do not show it anywhere. We do not store more of your calendar than is needed for that calculation.

Limits

What we do not do

  1. No selling or sharingWe do not sell calendar data and we do not pass it on to other parties, except to the suppliers that run our software and that have a data processing agreement for that purpose.
  2. No ads or trainingWe do not use it for advertising, for profiling or for training AI models.
  3. No reading alongNo one at our company reads your calendar. The only exception is when you ask us for help with a malfunction yourself and give permission for that, or when the law obliges us to.

AI

Artificial intelligence

For the AI visibility scan we use the APIs of OpenAI, Google (Gemini) and Anthropic (Claude), as described above. By default, those suppliers do not use input from business API customers to train their models.

In Core, an AI agent can write a draft reply to an incoming message from a lead and, at that lead's request, schedule an appointment. For this we use one supplier: the Anthropic API (Claude), called directly, without an intermediary, gateway or model aggregator. By default, Anthropic does not use input and output from business customers to train models.

The only thing from your Google Calendar that can end up in such a request is the free times that follow from your availability, and only at the moment something is being scheduled. We do not read the content of your appointments and therefore cannot pass it on either. Data that we receive through Google APIs is never used or transferred, in raw, aggregated or derived form, to create, train or improve AI or machine learning models. We do not train any models ourselves.

Disconnecting

How to remove the connection

You can revoke the connection at any time. You can do so directly with Google, at myaccount.google.com/permissions, and you can also ask us at info@deltasix.nl. Once the connection has been revoked, we delete the access token and the calendar data retrieved with it within 30 days. Appointments that were booked through our system remain in our records, because that is our own registration and invoicing depends on it.

Limited Use. The use and transfer by Delta Six of information that we receive through Google APIs complies with the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Delta Six Core's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

No Google user data, raw, aggregated or derived, is used or transferred to create, train or improve any generalized or foundational AI/ML model.

Processors

Who else sees your data

Only parties that help us run the service. With each of them it has been laid down that they may use your data exclusively for us and not for themselves. In the law this is called a data processing agreement.

What forWhat it means
CRM and follow-upYour request, your appointment and the messages you receive from us
Appointment remindersConfirmations and reminders by email and WhatsApp
Website and hostingThe pages and forms themselves
StatisticsOur own software on our own server in the EU. No data goes to another company for this
BookkeepingInvoices. Our accountant processes these

We do not sell your data. To anyone. We also do not pass it on to other companies, to competitors or to data brokers.

International transfers

Transfers outside the EU

Some suppliers are located outside the European Economic Area. When that happens, the data only goes to a party that is covered by a valid transfer mechanism, such as the standard contractual clauses of the European Commission. If you want to know exactly which parties are involved, email info@deltasix.nl and you will receive the list.

Retention

How long we keep it

WhatHow long
Showcase request or AI visibility scan without follow-up12 months, then deleted
Appointments that did not take place12 months
Client dataAs long as you are a client, plus 2 years
Invoices and records7 years. This is required by the Dutch Tax and Customs Administration (Belastingdienst)
Website statisticsA maximum of 13 months

If you want your data removed sooner, that is possible. See below.

Your rights

What you can demand from us

These are not favors. This is in the GDPR and it simply applies.

  1. AccessRequesting what we hold about you.
  2. RectificationIf something is incorrect, we correct it.
  3. ErasureWe remove it. Except what we are legally required to keep, such as invoices.
  4. RestrictionTemporarily locked while something is being looked into.
  5. PortabilityYour data in a file that you take with you to another party.
  6. ObjectionAgainst use based on legitimate interest, and always against marketing.
  7. Withdrawing consentAt any time. What we did before that remains valid, after that it stops.

Email info@deltasix.nl and you will hear within 30 days what we have done. Usually much sooner. We first ask you to identify yourself, because otherwise we would be giving your data to someone else. It costs you nothing.

Complaints

If you think we are getting it wrong

Tell us first, and we will resolve it. If you cannot work it out with us, you may file a complaint with the supervisory authority. That is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl, and visitors from the UK or elsewhere may also contact their local data protection authority. You always have that right, even without having come to us first.

Cookies

Cookies

This site exclusively uses storage that is needed to make the site work, such as remembering a form that you are halfway through filling in.

For our statistics your browser only stores a temporary visit number. It expires as soon as you close your browser or do nothing for half an hour. There are no advertising cookies and no cookies from other companies on the site at all, so there is nothing to accept either.

Security

Security

The site runs over an encrypted connection. Only people who really need it for their work can access your data. If something goes wrong despite everything and you are at risk as a result, we are required to tell you and we will.

Automation

Automated decisions

The AI visibility scan automatically calculates a score, based on public answers from AI assistants and your public website. That is a measurement, not a decision with legal consequences for you. There is always a human involved before we do anything concerning you.

Minors

Children

Our service is for entrepreneurs and businesses. We do not target people under the age of 16 and we do not knowingly collect their data.

Changes

If this policy changes

Then we update this page and put the new date at the top. If it is a major change and you are a client, we will let you know. We do not quietly change the rules.

Your free showcase

Step 1 of 5

What is your name?

So we know who we are building for.

Opening your request…