Privacy Policy

Last updated: October 2026

Introduction

Schakel is a service by Klappe Development, registered in the Netherlands. Schakel builds connectors between sales channels (such as Bol.com and Shopify) and tools (such as Moneybird). This policy explains what data we process when you use a connector and how we protect it.

What data we collect

Account details of the connected systems (such as your store name and user details);
API credentials and tokens of the connected services, stored encrypted;
Order, product, shipment, return and invoice data required for the connector;
Synchronisation logs to monitor operation and resolve issues.

How we use your data

We use your data solely to run the connector: syncing orders, inventory, shipments, returns, cancellations and invoices between your systems, and to support you with questions.

Mail to your buyers

An automation can send mail to the buyers of your orders: the invoice for an order, or a message about their return. Those mails go out in your name and under your shop name. You decide whether they go and what they say, which makes you the controller and Schakel the processor.

The mail goes to the relay address the sales channel issues per order, so neither you nor we see the buyer's real email address. Every mail carries a link with which the buyer stops mail from Schakel sellers. When a buyer opts out we keep only a hash of the address, so we can skip them without storing the address itself.

The buyer name, the relay address and the delivery address are kept until 18 months after the order. Invoices are kept for as long as the connector exists; the statutory seven-year retention duty is yours, so download them before you delete the connector.

The Moneybird assistant (AI and WhatsApp)

The Moneybird assistant is an AI assistant, not a person. You talk to it in the chat in your dashboard and, if you switch that on, in WhatsApp. Because it works with a language model and with WhatsApp, more parties see your data than with a plain connector. This is what goes where.

Language model, DeepSeek (outside the EU). To answer, the assistant sends DeepSeek (api.deepseek.com) your message, up to the last 20 messages of the conversation, the name of your administration and project names, the knowledge cards that are relevant, and the results it looked up in Moneybird (such as invoices, contact names and addresses, VAT numbers, bank lines and amounts). A photo you send goes to the model itself, a PDF goes as its text. DeepSeek is a provider outside the EU, and we do not state in which region it processes data.
WhatsApp, Meta. If you use WhatsApp, the messages and files pass through Meta (WhatsApp Business Cloud API), who can see them.
Voice messages, Cloudflare Workers AI. A voice message is transcribed with Cloudflare Workers AI, not by DeepSeek. The transcript is shown back to you as text and then handled like any other message.
Storage, Cloudflare. Your messages, knowledge cards and notifications are stored in Cloudflare D1. Files you send are stored in Cloudflare R2, to resolve problems. Your Moneybird access token is stored encrypted.
Gmail, Google, only if you connect it. If you connect Gmail, the assistant gets read-only access (gmail.readonly) and uses it only to look for the invoice that belongs to a bank payment. It books nothing based on a search hit, and it does not send mail.

We keep your messages and files for as long as your connector is active. We have not set a fixed retention period. You can read every message and what happened with it in your dashboard, and you can edit or delete knowledge cards. Want your messages or files deleted? Email legal@schakel.app. Send STOP in WhatsApp and the assistant stops replying and acting on that number straight away.

The assistant can be wrong. That is why anything that changes your administration shows a preview first, and sending, crediting and deleting always ask for your confirmation. The assistant never sends anything to your customers or other third parties on its own.

Storage and security

Data is stored encrypted and transmitted over HTTPS, on Cloudflare servers. Credentials and tokens are additionally encrypted. For connectors we keep data no longer than needed for the connector to function. For the Moneybird assistant, see the section above.

Your rights under the GDPR

You have the right to access, rectification, deletion, portability and objection. To exercise these, contact legal@schakel.app.

Data deletion

When you remove a connector or cancel your account, your data in our database is deleted automatically. Files you sent to the Moneybird assistant are deleted on request, email legal@schakel.app.

Cookies

Necessary cookies are always placed. They are needed to sign in, to submit a form, and to remember your cookie choice.

Statistics and advertising cookies are placed only after you consent. Say no and they are not set. These are Google Analytics 4 and Google Ads, which we use to measure how the site is used and which ad brought someone to us, so we do not keep paying for ads that return nothing. That data goes to Google.

Separately, we keep the advertising identifier (the gclid) and the campaign you arrived through for up to 90 days. If you create an account we link it to that account, so we can see which campaign led to a paid subscription. If you refuse advertising cookies, that identifier stays with us and is not sent to Google.

Your choice is kept for six months. You can change it at any time via Cookie preferences, at the bottom of every page.

Changes to this policy

We may update this policy from time to time. The most current version is always available on this page.

Contact

Privacy questions? Email legal@schakel.app or message us on WhatsApp at +31 6 12392801.