Privacy Policy

Last Updated: 2026-04-06

Rewize B.V. (“Rewize”, “we”, “us”) is a private company incorporated under the laws of the Netherlands (KvK: 95905162), with its registered office at Klokgebouw 152, 5617 AA Eindhoven.

This Privacy Policy explains how we collect, use, and protect personal data in connection with our platform at https://app.getrewize.com and our marketing website at https://www.getrewize.com. It applies to platform users, website visitors, and anyone who contacts us via our contact form.

1. Personal Data We Collect

1.1 Platform Users

When you create a Rewize account or are invited to one, we collect:

  • Name and email address, via Firebase Authentication
  • Usage and activity data, including feature interactions and session logs
  • Store operational data (inventory levels, orders, supplier information) — this is Customer Data processed on your behalf, as described in our Terms and Conditions

1.2 End-Consumer Data

The Rewize platform processes your sales data to generate forecasts. We retain only the Country and State/Province of end-consumer transactions for regional forecasting purposes. We do not store any other personally identifiable information about your customers.

1.3 Website Visitors

When you visit our marketing website, we collect:

  • Usage and browsing data via Google Analytics (page views, session duration, traffic source)
  • Company-level visitor identification via Clay (claydar.com). This script attempts to identify the organisation behind a visit based on IP address and enriches it with publicly available business data for our marketing and sales outreach. No individual is personally identified without their consent.

1.4 Contact Form Submissions

When you submit our contact form, we collect your name, email address, and message content. This data is processed by Formspark and delivered to us by email. Submissions are also stored in Formspark’s platform.

2. How We Use Your Data

We process personal data for the following purposes:

  • Providing and operating the platform — performance of a contract (Art. 6(1)(b) GDPR)
  • User authentication and account management — performance of a contract (Art. 6(1)(b) GDPR)
  • Sending product updates, feature announcements, and service communications to current and former users — legitimate interest (Art. 6(1)(f) GDPR). You may unsubscribe at any time via the link in any such email.
  • Responding to contact form enquiries — legitimate interest (Art. 6(1)(f) GDPR)
  • Improving our platform through usage analytics — legitimate interest (Art. 6(1)(f) GDPR)
  • Marketing and sales outreach based on website visitor identification — legitimate interest (Art. 6(1)(f) GDPR)
  • Website analytics via cookies — legitimate interest or consent where required under applicable ePrivacy rules (Art. 6(1)(f) GDPR)

3. Subprocessors

We share personal data only with the following service providers, all operating under data processing agreements:

  • Google Firebase — user authentication and account management (EU/US; EU data residency where available)
  • Google Cloud Platform — platform hosting and infrastructure (EU — Belgium)
  • MongoDB Atlas — database hosting (EU)
  • Postmark (Wildbit LLC) — transactional and product update emails (US; Standard Contractual Clauses in place)
  • Formspark — contact form processing (EU)
  • Google Analytics — website analytics (EU/US)
  • Clay — website visitor identification and lead enrichment (US; Standard Contractual Clauses in place)

We do not sell personal data to third parties.

4. Data Retention

  • Platform user accounts (name, email): retained for as long as your account exists. We do not automatically delete user accounts when a subscription ends or a trial does not convert. You may request deletion at any time (see Section 6).
  • Customer Data (store inventory, orders, etc.): retained for the duration of your active subscription. If a trial does not convert, store data is deleted after 30 days. Anonymised Derived Data used for model training is retained indefinitely.
  • Contact form submissions: retained for as long as necessary to respond to and follow up on your enquiry.
  • Website analytics data: subject to Google Analytics’ retention settings (default: 26 months).

5. International Data Transfers

Rewize stores and processes data primarily within the European Union. Where subprocessors are based outside the EU (notably Postmark and Clay in the United States), transfers are governed by the European Commission’s Standard Contractual Clauses (SCCs) or another approved transfer mechanism under Chapter V of the GDPR.

6. Your Rights

Under the GDPR, you have the following rights with respect to your personal data:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your personal data
  • Restriction — request that we limit how we process your data
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests, including for direct marketing purposes
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at privacy@getrewize.com. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl.

7. Cookies and Tracking

Our marketing website uses the following cookies and tracking scripts:

  • Google Analytics (_ga, _gid, _ga_*) — website usage analytics (page views, sessions, traffic sources)
  • Clay (static.claydar.com) — company-level visitor identification for marketing purposes. This script does not set persistent tracking cookies for individuals.

We do not use cookies for advertising, retargeting, or cross-site behavioural tracking.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via the platform. The current version is always available at https://www.getrewize.com/privacy.

9. Contact

For privacy-related questions or requests:

Rewize B.V.
Klokgebouw 152, 5617 AA Eindhoven, The Netherlands
privacy@getrewize.com