Privacy

Where your file goes

The upload is encrypted in transit, because the whole site is served over HTTPS and a browser will not send it any other way.

On arrival it is held in memory for a moment, attached to a single email addressed to info@margingraph.com, and released. We run no database and no file store, so that mailbox is the only place your file exists on our side. That is a deliberate design decision: a store nobody built is a store nobody can leave open.

How long it stays

No longer than thirty days, so we can still answer a question about a report you already have. Sooner if you ask: one email and it is gone, because there is exactly one place to delete it from.

It is not shared, not sold, and not used to train anything. The analysis is ordinary code with fixed rules, not a model that learns from what it reads, so there is nothing for your figures to be absorbed into.

Who else is involved

Four suppliers touch this, each on our instruction and none of them for a purpose of their own:

• Vercel hosts the site and runs the code that receives your upload.
• Resend delivers the intake email that carries your file to our mailbox.
• Our mail provider holds that mailbox.
• Mollie handles the payment, if you decide to buy the report. Your file never reaches them and we never see your card or bank details.

Personal data inside your figures

A profit and loss account is mostly not personal data, but a payroll line or a customer list can be. Where your file contains personal data, we process it only to produce your report and on your instruction, which makes us your processor for that part. The processing agreement covering that is already published and applies the moment you send a file, so there is nothing to negotiate first. If you need it signed on paper for your own records, ask and you get a signed copy.

The simplest protection is the one you control: remove names before you send. We never need them, and a report is no worse without them.

What we keep afterwards

The report itself, and the ordinary record of a sale: your email address, what you paid, and when. Dutch tax law requires invoice records to be kept for seven years, and we keep them.

We may keep anonymous statistics about how often a rule fires, to improve the rule. Counts and ratios, with no company, no name and no figure of yours attached.

Your rights

You can ask what we hold, ask for it back, ask us to correct it, or ask us to delete it, by emailing info@margingraph.com. We answer within a few days rather than the month the GDPR allows, because there is very little to look up.

The controller is Stefan Wobben Advies, Chamber of Commerce number 70889945, in the Netherlands. If you are unhappy with how we handled a request you can complain to the Autoriteit Persoonsgegevens.

Cookies and counting

No advertising cookies and nothing that follows you off this site. We count visits in aggregate to know which pages are read, and we measure how quickly pages load using Vercel Speed Insights, which sets no cookie and records nothing that could be joined back into a browsing session. Nothing about your file, your figures or your findings is ever sent to an analytics service.

The commercial terms

What you get, what it costs and when we do not charge is on the terms page, in the same plain language.