What I keep about you

Who

This waitlist belongs to Het Accu Huis B.V. (KvK 88977757), the controller of what happens to your data. Goldmary and Cushly are trade names of that company. Yair Knijn keeps the list. The site is goldmary.eu; the company details are in the colophon. Ask about your data via the contact address in the colophon (follows before launch).

What

Your email address, when you signed up and confirmed, the status (waiting or confirmed), whether you came through the form or the API, and a secret token for the confirm and opt-out link. If I invite you: a label for your group (such as zzp or small business) and when you were invited and used the invitation. No name, no IP address, nothing about your visit.

What for

To let you know when you can start, and then send you a personal invitation. Not for a newsletter or advertising.

Legal basis

Your consent: the tick box on the form and then your confirmation. Without that tick nothing is kept. You can withdraw consent at any time by opting out.

How long

A signup without confirmation does not count and is wiped after 30 days. A confirmed address stays until you opt out. If Goldmary does not launch, I wipe the whole list. Opting out wipes your row at once, with your labels and your app access if you had not used it yet.

Who else sees it

The list is not sold and not passed to a bank or the Belastingdienst. The site and the database run on Cloudflare, which acts as processor for this. The database is in Cloudflare's EU jurisdiction.

Outside the EU

Cloudflare has servers all over the world. A visit can therefore arrive outside the EU, and Cloudflare then technically sees your IP address. For transfers outside the EU, Cloudflare uses the European Commission's standard contractual clauses. The list itself stays in the EU.

Log

The site keeps a short technical log to find errors: which page, when, and whether it worked. It holds no email address and no token. Cloudflare keeps that log for a few days.

Cookies

The waitlist sets no cookies and loads no analytics. So there is no cookie notice. Anyone who later signs in to the app by invitation gets one cookie that keeps them signed in. It is functional and needs no consent.

Your rights

You may ask which data I hold about you, have it corrected or erased, restrict processing, object, and take your data with you. You can opt out yourself with the link on your confirmation page. For anything else, email the contact address in the colophon (follows before launch). You get an answer within a month. If you disagree, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority (autoriteitpersoonsgegevens.nl).

Decisions

No decisions about you are made by a computer. The list is a list.

Opt out

The confirmation page has a link that wipes your data. That link is personal. Do not share it.

The assistant

The assistant on the Dutch site is an AI. Your question and the last messages of the conversation go to Cloudflare Workers AI to produce an answer. I do not keep them and only log that there was a question, not what it said. The conversation lives in your browser tab and disappears when you close the tab. Do not share a BSN, bank details or other personal data in it.

Updated on 24 September 2026.