Privacy Policy
How we handle your data.
Last updated 9 September 2026. Applies to izabella.nl, app.izabella.nl, WhatsApp and the LinkedIn integration. Lees in het Nederlands
1. Who we are
Izabella is a service of FRONIQ - Automation Intelligence(FRONIQ, we, us), established in the Netherlands. We are the data controller for personal data processed through izabella.nl, app.izabella.nl, Izabella's WhatsApp number and the LinkedIn integration. Privacy questions, access or deletion requests: support@froniq.nl.
For clients who use Izabella for their own channels, we act as a processor for the content of their posts, their photo material and the data of their own customers, under the service agreement and a data processing agreement. The client remains responsible for the legal basis of, for example, photos of people they supply.
2. What we process, why, and for how long
| Situation | Data and purpose | Retention |
|---|---|---|
| Visiting izabella.nl | Technical logs of our hosting environment (IP address, timestamp, requested page, browser) to keep the site secure and available. The website sets no tracking or advertising cookies, uses no third-party analytics, and serves fonts and images from our own servers. | Up to 30 days |
| Contact form | Name, company, email, phone (optional), your answer on where you currently publish, and your message, to get in touch about Izabella. Stored in our database. | 12 months after last contact, or earlier on request |
| "Try it yourself" on izabella.nl | The company name and topic you enter are sent to Anthropic to generate a sample text. Your IP address is briefly held in server memory to limit abuse; it is not stored in a database. | Sample text up to 24 hours in temporary server memory, not linked to a person; IP counter up to 24 hours |
| Client account and dashboard (app.izabella.nl) | Name, email and login credentials (managed by Supabase Auth, including the emails it sends), brand information such as tone of voice, audience, positioning and visual identity, topics and briefings, draft posts and their versions, feedback, generated visuals, and photos and logos you upload. | For the duration of the agreement, then 90 days, unless a legal retention duty applies |
| Your phone number, WhatsApp profile name, the messages you exchange with Izabella and media you send, to present drafts, process feedback, remember preferences and schedule posts. | For the duration of the agreement, then 90 days | |
| LinkedIn integration | See section 3. | See section 3 |
Izabella remembers preferences you express in feedback (for example "always write in the first person plural") as client memory on the client's account. That memory can be viewed and deleted in the dashboard.
3. LinkedIn data
When you connect your LinkedIn Company Page to Izabella, you do so through LinkedIn's official sign-in (OAuth 2.0) and you consent to exactly the permissions Izabella needs to publish on behalf of your organisation. Through the LinkedIn API we then process: an access token and a refresh token; the name of the person who created the connection (for traceability in the dashboard); the name and identifier (organization URN) of the Company Page you select; and, after publishing, the identifiers (URNs) of the published posts. We only request the permissions this requires (sign-in, admin role on the page, publishing on behalf of the page).
We use this data solely to publish posts on the Company Page you selected, at the moment you approved them. We do not read messages, connections, feed or profile data of you or anyone else, we never publish anything without your approval, and we do not use LinkedIn data for any other purpose, for training AI models, or for sale or rental to third parties. LinkedIn data is never combined with data of other clients.
Tokens live in our EU database, which is encrypted at rest and shielded by access rules (row level security); only the server processes that perform publishing can reach them. We never keep LinkedIn data longer than the LinkedIn Marketing API Program Data Storage Requirements allow. You can revoke the connection at any time in the dashboard or in your LinkedIn settings (Data privacy, Permitted services). On revocation or termination of the agreement we delete the tokens immediately and all other LinkedIn data within 30 days. We comply with the LinkedIn API Terms of Use and the LinkedIn Marketing API Terms.
4. Legal basis
We process data to perform the agreement with our clients (dashboard, WhatsApp, publishing), based on your consent (contact form, the LinkedIn connection, the on-site demo) and based on our legitimate interest in a secure, working service (logs, abuse prevention). You can withdraw consent at any time without affecting prior processing.
5. Who we share data with
We do not sell data. We only share it with the providers that make our service technically possible. This is the complete list:
| Provider | Purpose | Location |
|---|---|---|
| Microsoft Azure (App Service) | Hosting of izabella.nl and app.izabella.nl, including rendering visuals on our own server, and the technical logs. | West Europe region (Netherlands) |
| Supabase | PostgreSQL database, authentication (Supabase Auth, including verification and password emails) and file storage for logos, photos and visuals. | EU |
| Anthropic | AI model (Claude) that drafts texts, the copy inside visuals and Izabella's replies in WhatsApp. We only send what the task needs: brand information, topic, feedback and recent posts of the same client. Anthropic does not use API data to train models and retains it for at most 30 days. | United States, under the European Commission's standard contractual clauses |
| Meta Platforms (WhatsApp Business Platform) | Sending and receiving WhatsApp messages between you and Izabella. | United States and EU, under the EU-US Data Privacy Framework |
| LinkedIn (Microsoft) | Publishing posts on your Company Page and retrieving statistics through the LinkedIn API. | United States and EU, under the EU-US Data Privacy Framework |
| GitHub (Microsoft) | Management of our source code and a scheduled job that triggers publication of approved posts. GitHub processes no personal data of yours in doing so. | United States |
When rendering visuals, our server loads fonts from Google Fonts and Fontshare. This happens server-side; no visitor or client data is sent to those parties. Where data is processed outside the European Economic Area, this is based on an adequacy decision or the European Commission's standard contractual clauses.
Generated visuals and uploaded logos and photos are kept in a storage bucket whose files are reachable through unguessable links. This is required to publish them on LinkedIn. These links are not shared publicly, except in the posts you approve yourself.
6. Security
All traffic is encrypted (TLS). Access to data is role-based: only FRONIQ staff with a staff role can access the dashboard, enforced by the database at row level (row level security). Anonymous database access is excluded and new accounts can only be created by us. Secrets and keys are kept outside the source code. Nothing is ever published without human approval by the client. Webhooks from WhatsApp and LinkedIn are verified before processing.
7. Your rights and data deletion
You have the right to access, rectify, erase, restrict processing, port your data and object. Send requests to support@froniq.nl; we respond within 30 days and may ask you to confirm your identity. If you want all your data deleted, including LinkedIn and WhatsApp data, we do so within 30 days and confirm by email. For WhatsApp, processing also stops as soon as your number is removed from the client's contact list. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Automated decision-making and AI
Izabella uses AI to draft texts and visuals and to reply in WhatsApp. No decisions with legal or similarly significant effects are made about you; every post is reviewed and approved by a human before it is published.
10. Other
Our service is not directed at persons under 16. We may update this policy; the current version is always available at izabella.nl/privacy/en with the date of the last change. In case of discrepancies, the Dutch version at izabella.nl/privacy prevails.