On this page · 8 sections
This policy explains what personal data Next Boring Company B.V. (“we”) processes when you visit nextconfigurator.com, request a walkthrough, or use the Next Configurator platform, and what rights you have under the GDPR.
1. Controller
Next Boring Company B.V., Anna Blamansingel 165, 1102 SV Amsterdam, the Netherlands. Email: [email protected]. KvK 98219863.
2. Visiting the website
When you open a page we process the data your browser sends (IP address, user agent, requested page, referrer, time) in server logs for up to 14 days to keep the site running and secure (Art. 6(1)(f) GDPR). We set no tracking cookies without your consent. If you accept analytics or advertising cookies in the consent banner, Google Analytics 4 and Google Ads conversion measurement may process pseudonymous usage data (Art. 6(1)(a) GDPR); you can withdraw consent at any time via the banner.
3. Walkthrough requests and contact
When you book a walkthrough or contact us we process your name, email, company, website, phone number and message to answer you and prepare the demo (Art. 6(1)(b) GDPR, pre-contractual steps). We keep this data for 12 months after our last contact unless a contract follows.
4. Using the platform as a merchant
When you create a login or a store we process your account data (email, name, password hash, optional two-factor secret), your organisation and billing data (handled by Stripe, Inc. as payment processor) and everything you enter into your store. Purpose: performing the contract (Art. 6(1)(b) GDPR). Data is kept for the duration of the contract and the statutory retention periods afterwards (7 years for invoices under Dutch tax law).
Product analytics: while you are signed in to the merchant admin we use PostHog (PostHog Inc., EU Cloud, data stored in the European Union) to see how the admin is used and where it gets stuck, including session replays. We identify you only by an internal account id (never your name or email). Everything typed into fields is masked, and text with your customers’ data (requests, quotes, prices, names, contact details) is hidden in replays. Legal basis: our legitimate interest in improving the product (Art. 6(1)(f) GDPR). Do Not Track and Global Privacy Control are respected. On the public website and the sign-up pages PostHog runs only after you accept analytics cookies in the banner.
Help assistant: the “Ask” button in the admin answers questions about the platform. Your questions and the answers are stored encrypted, linked to your login and store, so you can continue a chat; we send them to Google’s Gemini API without email addresses or phone numbers (masked first) and without your customers’ data. Chats you don’t use for 12 months are deleted automatically, and you can delete a chat yourself at any time. When you choose “Ask the team”, our team reads that chat to answer you. Legal basis: performing the contract (Art. 6(1)(b) GDPR).
5. Data of your customers
Quote requests, photos, addresses and bookings that your customers submit through your configurator are processed on your behalf. You are the controller for that data; we are the processor under the data processing agreement that forms part of our terms. We use it only to provide the service to you.
6. Hosting and processors
The platform is hosted in the European Union. Processors we use: hosting provider (EU), Mailgun (transactional email), Stripe (payments), Gotenberg (PDF rendering, self-hosted), Google (the Gemini API: when you use “Write my site for me”, your store’s product and company details are sent to write your texts; when you use the help assistant, your questions are sent without email addresses or phone numbers to write the answers; not used to train Google’s models). Each processor is bound by a data processing agreement.
7. Your rights
You can request access, rectification, erasure, restriction, data portability and object to processing based on legitimate interest. Write to [email protected]. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Changes
We update this policy when the service changes. The date above shows the latest revision.