Privacy Policy
Last updated: March 19, 2026
We take your privacy seriously. This policy explains what data we collect, why, and what rights you have.
1. Who we are
myAdmin is operated by Goodwin Solutions BV, registered in the Netherlands under KvK number 24352408.
Address: Beemsterstraat 3, 2131 ZA Hoofddorp
Email: privacy@jabaki.nl
2. Data we collect
| Data type | Examples | Required? |
|---|---|---|
| Account info | Name, email, password | Yes |
| Company info | Company name | No |
| Usage data | Property count, referral source | No |
| Technical data | IP address, browser, device type | Automatic |
| Analytics data | Pages visited, clicks, scroll depth | Via consent |
3. Why we collect it
- • Contract performance — to create and manage your account
- • Legitimate interest — to improve our service, prevent fraud
- • Consent — for analytics cookies and marketing emails
- • Legal obligation — tax and financial record-keeping
5. Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Railway (EU West, NL) | Database hosting | Account & app data |
| AWS Cognito (EU-WEST-1) | Authentication | Login credentials |
| Google Drive / AWS S3 | Document storage (invoices, files) | User-owned documents |
| Google Analytics (GA4) | Website analytics | Usage data (anonymized) |
| Google Fonts | Typography | IP address |
| Email provider (TBD) | Transactional emails (verification, etc.) | Email, name |
All third-party services are GDPR-compliant and process data within the EU/EEA, or under Standard Contractual Clauses.
6. Data storage & retention
| Data | Location | Retention |
|---|---|---|
| Account data (name, email, settings, usage) | Railway EU West (Amsterdam, NL) | 1 year after contract closure |
| Login credentials (auth tokens, password hashes) | AWS Cognito EU-WEST-1 (Ireland) | 1 year after contract closure |
| Documents & invoices | User-owned Google Drive or S3 buckets | Owned and managed by the user |
| Analytics data (anonymized) | Google Analytics (EU settings) | Per GA4 defaults |
- • All data stored within the EU (Netherlands and Ireland)
- • Trial data: retained 30 days after trial expires if not converted to paid, then deleted
- • After contract closure: data retained for 1 year with export available, then permanently deleted
- • Financial records: user is responsible for 7-year retention (Dutch tax law) via their own Google Drive / S3 storage
- • Data export available at any time from account settings
7. Your rights
Under GDPR, you have the following rights:
Access
Request a copy of your data
Rectify
Correct inaccurate data
Erase
Delete your personal data
Portability
Export your data in a common format
Restrict
Limit how we process your data
Object
Opt out of certain processing
To exercise any of these rights, email privacy@jabaki.nl. We will respond within 30 days.
You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
8. Children's privacy
myAdmin is a business tool not intended for use by anyone under 18. We do not knowingly collect data from minors.
9. Changes to this policy
We may update this policy from time to time. Significant changes will be communicated via email or an in-app notice. The "last updated" date at the top reflects the latest revision.