Privacy Policy

Last updated: December 18, 2025

EPAdossier ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard personal data within our platform designed for energy advisors (EPA-adviseurs) and their clients.

1. Data We Collect

As a platform that facilitates energy label generation, we collect:

• Advisor Data: Name, professional certifications, business contact details, and payment information.
• Dossier Data: Property addresses, building specifications, CAD files, photos, and energy performance metrics.
• Client/Owner Data: Contact information provided by advisors to facilitate label delivery and payment.
• Support Data: Communications with our support team and usage analytics.

2. Purpose of Processing

We process data to:

• Generate and store energy performance dossiers.
• Facilitate the legal registration of energy labels with official bodies (RVO/EP-Online).
• Provide technical tools for energy label simulation and calculation.
• Process payments for dossier credits.
• Improve our software through usage analytics.

3. Data Sharing and Sub-processors

We share data only when necessary to provide our service. Our key sub-processors include:

• AWS: Encrypted cloud storage and infrastructure.
• Neon: Secure database management.
• Stripe: Payment processing.
• Resend: Transactional emails and label delivery.
• Government APIs (RVO/EP-Online): Official label registration.
• Energiekezaak & Google Maps: Address validation and property insights.
• Posthog: Privacy-focused product analytics.

4. Your Rights

Under the GDPR (AVG), you have the right to access, rectify, or delete your data. Advisors are the Controllers of their clients' data; we act as the Processor and will assist in fulfilling these requests.

5. Governing Law

This policy is governed by the laws of The Netherlands.