Privacy statement

Last updated: 22 October 2026

1. Who is responsible?

Werkbank is a service of Wabi-Sabi Livingware, trading as Werkbank, a sole proprietorship registered with the Dutch Chamber of Commerce (KvK) under number 99427214 and VAT number NL005385788B45, hereinafter “Werkbank”, “we”.

Contact for privacy questions: sam@getwerkbank.app.

Werkbank processes personal data in two roles:

Controller for the data of studio owners and team members who hold a Werkbank account (registration, billing, support).
Processor for the data a connected studio enters into Werkbank about its students. The studio is the controller for that data; the arrangements are set out in the data processing agreement.

2. What data do we process, and why?

a. Studio users (account holders)

Name, e-mail address	Creating an account, signing in, support, essential service messages	Performance of the contract (Art. 6(1)(b))
Password (stored encrypted as a hash, argon2id)	Secure sign-in	Performance of the contract
Number of failed sign-in attempts, time of lockout	Preventing abuse and brute-force attacks	Legitimate interest (security)
Studio/company name, chosen plan, payment details via Mollie	Billing and administration	Performance of the contract; statutory retention obligation (tax)
IP address (short-lived, in server and security logs)	Security, troubleshooting, rate-limiting	Legitimate interest

b. Students (entered by the studio, without their own account)

The studio is the controller for this data; we process it solely on the studio’s instructions.

Name (required)	Linking work to the right person	Studio-student agreement / legitimate interest of the studio
E-mail address and/or phone number (optional)	Notifying when work comes out of the kiln or is ready for pickup	Same
Booking/student number, status-link token	Letting the student check their own status without an account	Same
Enrolments, attendance, pickup moment, agreement to studio policy	The studio's course administration	Same
Breakage record (what went wrong, optional photo, cause note)	Informing the student and the studio's administration	Same
Outstanding firing costs per student	Tracking who still needs to pay	Same
Marketing consent (only if explicitly ticked) + opt-out status	Optional promotional/news mail from the studio (e.g. a last-minute spot)	Consent (Art. 6(1)(a)) — separate, not pre-checked, always revocable
Send log: e-mail address at the time of sending, message type, timestamp	Preventing duplicate messages; proof of sending	Legitimate interest

We do not ask students for more than necessary. Free-text fields (e.g. a breakage note) can unintentionally contain more sensitive information than intended; we advise studios to keep them short and factual.

3. How long do we retain data?

Account data: for as long as you hold a Werkbank account. If you delete your studio yourself, we delete its data and photos immediately. If your subscription ends (cancelled or unpaid) and nobody from your studio logs in for 90 days afterwards, we warn you by email 30 and 7 days beforehand and then delete the studio with all data and photos; logging in again restarts the 90 days. You can export beforehand. The invoices we issue to you are kept for 7 years because of the statutory tax retention obligation.
Student data: for as long as the studio retains it. A studio can delete a student at any time and can enable automatic cleanup in settings (e.g. students who have not been on an active batch or course for a set period are deleted automatically).
Send logs: a maximum of 24 months, after which they are automatically deleted (including the retained e-mail address).
Sign-in and recovery tokens: expire within minutes to an hour and are cleaned up afterwards.
Server and security logs containing IP addresses: a maximum of 90 days, unless a longer period is needed to investigate a security incident.

For our own cookieless count of button use on the website we only record the event type, language, page and date; no IP address and no user agent.

4. Who do we share data with (sub-processors)?

We do not sell data. We engage service providers that are necessary to run Werkbank. A data processing agreement is (or will be) in place with each of them.

Service	Purpose	Location
Neon	Database (all app data)	EU — Frankfurt (eu-central-1)
Vercel	Hosting the app	EU region where available; appropriate transfer safeguards where needed
Resend	Sending e-mail (sign-in, notifications)	Processor; data processing under the applicable data processing terms
Cloudflare	Photo storage (R2) and DNS	R2 bucket: Western Europe (WEUR)
PostHog	Product analytics (anonymised, no autocapture of form contents)	EU — eu.i.posthog.com
Sentry	Error monitoring (personal data is filtered out)	Configured with data minimisation only; no form contents, cookies or tokens
Mollie	Payments and subscriptions	EU — Netherlands · (not yet active)

The current list is in the data processing agreement. We announce changes in advance.

5. Transfers outside the EEA

We aim to process all data within the EEA. Where a service provider is located outside the EEA or has a US parent company, transfers take place on the basis of the EU Standard Contractual Clauses (SCCs) and/or an adequacy decision.

6. How do we secure data?

Traffic exclusively over HTTPS; HSTS enforced.
Passwords stored as an argon2id hash; temporary lockout after repeated failed sign-in attempts; rate limits on sign-in, registration and link requests.
Access to studio data is isolated per studio; only invited team members get access, with roles (owner / admin / team member).
Error monitoring and analytics are configured so that personal data (names, e-mail, tokens) is not included.
Database backups via Neon, used exclusively for recovery after an outage or incident.

7. Cookies and analytics

Werkbank does not use tracking or advertising cookies. For sign-in we place a necessary session cookie. For product analytics we use PostHog (EU) only after your consent; automatic capture of form contents is disabled and we do not process profiles of visitors who are not signed in. Read more in our cookie policy.

8. Your rights

You have the right to access, correct, delete, restrict and port your data, and the right to withdraw consent you have given.

Studio user: e-mail sam@getwerkbank.app. A full export of your studio data is available via Firing costs › Export.
Student: your data is in Werkbank because your studio uses Werkbank. Direct your request for access, correction or deletion to your studio; they can act on it directly in Werkbank. You can unsubscribe from promotional/news mail yourself via the link at the bottom of such a mail. If you cannot resolve it with your studio, e-mail sam@getwerkbank.app.

9. Data breaches

Do you suspect a data breach or security issue? Report it as soon as possible to sam@getwerkbank.app. In the event of a data breach posing a risk to data subjects, we inform the affected studios without undue delay and, where required, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours.

10. Complaints

You can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl). We appreciate it if you contact us first.

11. Changes

We may amend this statement. We announce material changes via the app or by e-mail. The date at the top reflects the latest version.

← Back to Trust & privacy