Skip to content
NLEN
Log inRequest an introduction
Log inEN

Privacy policy

Last updated: 8 October 2026

Below you can read which data BEP processes, why, where it is stored and which services help with it. We only write down what has been established.

Who we are

BEP is the AI business platform for small businesses, available at getbep.com.

BEP is offered by EasyBio Company, Chamber of Commerce (KvK) 98957325, Struyckenlaan 29, 3527 KJ Utrecht, the Netherlands. For privacy questions: info@easybiocompany.com.

When you request access

The request form asks for your email address and, if you like, what type of business you run. We only use this to contact you about the pilot. You will not be added to a newsletter.

Your request is stored in our database in Frankfurt (EU). The BEP team receives a notification that a request has come in; that notification contains none of your details.

We keep a sign-up request for twelve months, or until you have an account.

When you use BEP

Within BEP we process the data your business puts in or brings in through a connection: for example emails via Gmail, customers, orders and products via Shopify, and tasks, invoices and receipts. Data is kept separate per company.

BEP staff do not look at your business data unless your business switches on support access. That access is temporary, visible to your business and recorded.

For the data of your customers and contacts, your business is the controller and BEP the processor; the data processing agreement is part of the pilot terms.

Where your data is stored

  • The app runs on Vercel servers in Frankfurt (EU).
  • The database is hosted by Supabase in Frankfurt (EU).

Services involved

  • Anthropic, for the AI features. According to Anthropic's commercial terms (Commercial Terms, section B), Anthropic does not train on the data we send. Anthropic is based outside the EU; that transfer is covered by Standard Contractual Clauses (Data Processing Addendum, section I.1). After the agreement ends, Anthropic deletes customer data within 30 days (DPA, section H.1).
  • OpenAI, only if your business connects its own OpenAI key. OpenAI's terms then apply; according to OpenAI, API data is not used for training unless you choose to share it.
  • Google, for the Gmail connection if you switch it on, and for searching for businesses with the Lead-hunter (searches by type of business and area).
  • Shopify, for the shop connection if you switch it on.
  • Vercel Speed Insights, which measures how fast pages load. According to Vercel this is anonymous and not tied to a visitor or IP address.

Google data (Gmail)

When you connect your Google account, BEP asks for access to your Gmail. BEP uses that access only to read your emails and prepare drafts and, after your approval, to send replies on your behalf. BEP does not use this data for advertising, does not sell it, and does not share it with third parties other than the processors needed to provide the service. If you remove the connection, BEP immediately revokes its access with Google and deletes the token. The raw email data BEP read from your mailbox, the subject, text, addresses and date of incoming mail, is then deleted within 30 days (in practice within a week). What your business recorded on the basis of that mail is kept as your own data: approved replies, customers, leads, tasks, invoices and receipts.

BEP's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we do not do

  • We do not use your data for advertising.
  • We do not set tracking or advertising cookies.

Cookies

BEP only uses cookies that are needed for the site and the app to work:

  • a session cookie, only when you log in; after at most 8 hours you log in again;
  • lang: remembers your language choice on the website, for one year;
  • bep_organization_id: remembers which organisation the subdomain you visit belongs to;
  • shopify_oauth_state: short-lived, only while connecting Shopify.

Your rights

Under the GDPR you may access your data, have it corrected or deleted, object, restrict processing and take your data with you. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Send requests to info@easybiocompany.com.

Changes

If this text changes, we update the date at the top.