Privacy & AI
How we handle your data
Version 18 October 2026. The Dutch version prevails.
1. Who we are
Beraad is a service of RAW Footage, eenmanszaak, handelend onder de naam Roffanova, Franselaan 236c, 3028 AP Rotterdam, KVK 53329546, btw NL001636700B96. We are responsible for processing your data (the "controller"). Send privacy questions or requests to support@beraad.ai.
You use Beraad through PostNL HR. PostNL HR only sees usage statistics (numbers of questions and areas of law), not the content of your questions and answers.
2. You are talking to an AI assistant
Daan is an AI assistant, not a person and not a lawyer. Answers are written by an AI model (Claude, by Anthropic). Daan looks up legal provisions and rulings in official sources (wetten.overheid.nl, rechtspraak.nl, EUR-Lex) and cites them. The answer is legal information, not advice from a lawyer.
We don't take decisions about you based solely on automated processing (art. 22 GDPR). Daan gives information; what you do with it is up to you.
3. What data, why, on what legal basis and for how long
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| E-mail address, name (if you give it), language, login times | Your account, signing in with a link, messages about your case | Contract (art. 6(1)(b) GDPR) | As long as your account exists |
| What you tell us: the conversation, the summary, your questions, the answers, the text read from documents and the deadlines in it. This may include sensitive data, such as about health or criminal offences | Answering your legal question | Contract; for sensitive data your explicit consent (art. 9(2)(a) GDPR; for criminal-offence data art. 10 GDPR with art. 32(a) of the Dutch GDPR Implementation Act) | 30 days after the last answer. Longer while a package runs (up to 14 days after), after a referral (at least 30 days) or until 14 days after a deadline you set a reminder for. An unfinished conversation after 7 days |
| Proof of your consent: date, text version and your choice | Being able to show you consented | Legal obligation (art. 7(1) and 6(1)(c) GDPR) | As long as your account exists; then up to 2 more years, without your e-mail address |
| Notifications: a technical address of your browser or phone | Telling you your answer is ready or a deadline is near | Consent (you turn them on; art. 11.7a Dutch Telecommunications Act) | Until you turn them off or delete your account |
| A private link you create to share a case (only a hash of the link, the expiry date and the view count) | Letting someone you choose read your summary and analysis | Contract, at your request | The link works for 7 or 30 days, until you revoke it; the data goes with the case |
| Your rating of an answer and your comment | Improving the service | Legitimate interest | Deleted with the case |
| Security data: a log of actions (who, what, when) and short-lived abuse counters | Security, preventing abuse, finding errors | Legitimate interest | Log 2 years; counters a few hours. When you delete your account we replace your e-mail address in the log (except for payments) |
| Usage and cost figures (counts, no content) | Keeping AI costs under control | Legitimate interest | 2 years |
| Database backups | Recovery after an outage | Legitimate interest | 14 days, encrypted |
Our legitimate interests are: a secure service, preventing abuse (so the free quick scan stays available to everyone), controlling costs and improving quality. We have weighed that this processing is limited and has little impact on your privacy. You can object to it (see 7).
4. Documents you add
A photo or PDF of a letter, contract or decision is sent to Anthropic's AI model to read the text. We remove metadata (such as location) from photos first. We don't keep the file itself. From the text we keep, we remove citizen service numbers (BSN) and bank account numbers. Note: this happens after reading, so the AI model has seen the full document. A document often also contains other data, such as your name, address or health information.
6. Who we share data with
- Anthropic (United States) processes your question as our processor to write the answer. Under Anthropic's commercial terms, Anthropic does not use your data to train AI models and deletes it within 30 days. If it suspects a breach of its usage policy, Anthropic may keep data longer (up to 2 years). For current figures the model may search the web; the search query, derived from your question, then goes through Anthropic to a search service.
- Official sources (wetten.overheid.nl, rechtspraak.nl, EUR-Lex) receive queries such as a legal provision or search terms, not your personal data.
- Netcup (Germany) hosts the server and database in the European Union.
- Brevo (France) sends our e-mails and text messages: only your e-mail address or phone number and a link or code, never the content of your case.
- mijn.host (Netherlands) hosts our mailboxes and sends the e-mails with a sign-in link, so that link doesn't pass through a third party.
- Your browser's notification service (Google, Apple or Mozilla) delivers notifications if you turn them on. The notification is encrypted and never contains the content of your case; the service does see the technical address and the time.
- Someone you choose, if you create a private link yourself. They see the summary and analysis, not your conversation, documents or account. Search engines can't find the page.
Transfers outside the EU. Anthropic is based in the United States. That transfer relies on the European Commission's standard contractual clauses (art. 46(2)(c) GDPR), which are part of Anthropic's data processing terms. You can ask us for a copy of these safeguards. Google's and Apple's notification services may also process data in the US.
Who can look. We don't read cases. Only the administrator of Beraad has technical access to the database, and only looks into a case if you ask, for an outage that can't be solved otherwise, or on a concrete suspicion of abuse. We do read the comments you give with a rating, to improve the service.
7. Your rights
You have the right to access your data, have it corrected, have it erased, restrict processing, object to processing based on our legitimate interest, and take your data with you (portability). You can do much of this yourself in Account: download your data, delete a case or your whole account. For anything else, e-mail support@beraad.ai. We reply within one month; for a complex request this can be extended by two months, and we'll tell you so within the first month. It's free.
Withdrawing consent. You can withdraw your consent at any time in Account, as easily as you gave it. After that we process nothing new for you; what was already processed stays lawful, and you can have those cases deleted straight away.
Complaint. If you disagree with how we handle your data, you can complain to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
8. Do you have to give data?
Without your e-mail address you can't sign in. Without what you tell us about your situation, we can't answer your question. We only process sensitive data with your explicit consent; without that consent we can't answer your question. You can often leave sensitive details out or keep them general, for example "I've been ill for a long time" instead of a diagnosis.
9. Other people's data
When you describe your situation, it is often about others too, such as your employer, landlord or family. Only share what's needed; names are usually not needed. If someone mentioned in a case wants to exercise their rights, they can e-mail us; we handle that request carefully and within one month.
10. Age
Beraad is for people aged 16 and over.
11. Cookies
We only use cookies needed for the site to work: to keep you signed in, against forged forms, and to remember your language and colour setting. We don't use analytics, advertising or tracking cookies. If you arrive through a shared link (with ?ref= in the address), we count that per day, and whether an account is created afterwards. These are totals only: we keep no IP address and nothing that can be traced back to you.
12. Security
Connections are encrypted (HTTPS). You sign in with a one-time link, without a password. Backups are encrypted. Only the administrator has access to the server. If a data breach puts you at risk, we'll tell you and the Dutch Data Protection Authority.
13. Changes
If we change this statement substantially, you'll see it here from the date. If anything changes about what you consented to, we'll ask for your consent again.