Privacy policy

Who we are

stocklots.ai is a B2B platform for trading stocklots. This policy explains what we do with personal data when you visit this website or join the waitlist.

Controller: Stocklots.ai, Almystraat 12, Unit 2.04 / 2.05, 5061 PA Oisterwijk, the Netherlands.Questions about this policy: info@stocklots.ai.

What we collect and why

We collect only what the purpose below needs.

• Waitlist form. Your email address (required) and, if you provide them, your name, phone number, company name, VAT number and whether you want to buy or sell. If you arrived through a QR code, we also store its campaign code. We use this to add you to the early-access list and to contact you about early access. Legal basis: your consent, given with the checkbox on the form (Article 6(1)(a) GDPR).
• VAT number check. We check a VAT number you enter against the EU VIES service. Legal basis: your consent.
• IP address. The server that receives your signup reads your IP address to limit repeated requests and prevent abuse. Legal basis: our legitimate interest in keeping the service secure (Article 6(1)(f) GDPR).
• Spam protection. Google reCAPTCHA v3 scores each signup to tell people from bots. It loads only after you agree to it. Legal basis: your consent.
• Analytics and marketing tags. Google Tag Manager loads only if you accept analytics or marketing cookies, and only if we have enabled it. Legal basis: your consent. Visitor counts through Vercel Web Analytics use no cookies and no personal profile.

You can withdraw consent at any time in the cookie settings or by emailing us. Withdrawal does not affect what we did before.

Who processes your data

We share data only with the providers below. They act on our instructions as processors or, for Google, under their own terms where stated.

• Vercel: hosts this website, with server functions running in the EU (Dublin), and provides cookieless Web Analytics.
• Upstash: Redis service that counts requests per IP address for rate limiting.
• Odoo: our CRM. Each signup becomes a contact and a lead.
• Brevo: sends our emails to waitlist members.
• Google: reCAPTCHA (spam protection) and Tag Manager. Both load only with your consent.
• EU VIES: the European Commission service that validates VAT numbers.

Transfers outside the EU

Some providers, including Google and Vercel, may process data in the United States. Where they do, we rely on the EU-US Data Privacy Framework or on standard contractual clauses.

How long we keep data

Waitlist data: up to 24 months after you sign up or last contact us, whichever is later; if you become a customer, our customer terms apply instead. IP addresses used for rate limiting: deleted automatically within 24 hours. Your cookie choice is stored for 12 months. We delete or anonymise data once the period ends, or sooner if you withdraw consent or ask us to.

Your rights

Under the GDPR you can ask us to:

• give you a copy of your data (access)
• correct inaccurate data (rectification)
• delete your data (erasure)
• limit how we use it (restriction)
• give you your data in a portable format (portability)
• stop processing based on our legitimate interest (objection)

You can also withdraw consent at any time. Email info@stocklots.ai and we answer within one month. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes to this policy

We update this page when our processing changes. The date at the top shows the latest version. If a change needs your consent, we ask again.