Privacy Policy

Innerscape is operated by Innerscape, based in Utrecht and registered with the Dutch Chamber of Commerce under number 99997908.

For questions about this privacy policy, you can reach us at remco@innerscape.nl.

When you use Innerscape, we process the following personal data:

— Account data: your email address and an encrypted password (hash). When signing in via Google, we receive your name and email address from Google.

— Psychological test responses: your answers to 365 questions from 8 validated scientific questionnaires. These qualify as special category personal data under Article 9 of the GDPR.

— Computed scores: the outcomes calculated from your answers (scale scores, dimensions).

— AI-generated report: the personality report created from your scores by an AI system.

— Technical data: IP address and browser information automatically recorded when visiting the website.

— Usage data: which pages you visit, which site or campaign brought you here, how fast pages load and — when you are logged in — whether you opened your report or downloaded it as a PDF. How we measure this is described below under Visitor statistics and error tracking.

We process your data on the following legal bases:

— Performance of a contract (Art. 6(1)(b) GDPR): your account data, computed scores, and AI report are necessary to deliver the service you requested.

— Explicit consent (Art. 9(2)(a) GDPR): for processing your psychological test responses — special category personal data — we ask for your explicit consent. You may withdraw this consent at any time.

— Legitimate interest (Art. 6(1)(f) GDPR): for technical data necessary for the security and functioning of the website, and for the visitor statistics with which we measure how the site and the report are used.

— Consent (Art. 6(1)(a) GDPR): for Google Analytics cookies and error tracking with Sentry in your browser, which you switch on or off in the cookie banner.

If you select the separate marketing choice during signup, we may rely on your consent (Art. 6(1)(a) GDPR) to email personal insights from your computed test scores, product news, and occasional offers. This choice is off by default and is not required to use Innerscape.

For a personal insight, our AI system uses only a limited selection of computed scores and percentiles, not your raw answers. Resend receives your email address and the content for delivery and processes delivery, bounce, complaint, and click events. We do not retain click IP addresses, browser information, or full provider payloads from webhooks.

Personal preview text is deleted no later than 30 days after the delivery job reaches a final state. We retain delivery, consent, and conversion metadata only as long as needed for evidence, unsubscribe handling, security, and pilot evaluation.

You can withdraw marketing consent at any time, free of charge, through the unsubscribe link in every email. This stops future personal insights, product news, and offers and does not affect your account or purchased reports.

If you started a journey and have not continued for 24 hours, we send you a single reminder with your progress as a percentage and a link back to where you left off. We do this on the basis of legitimate interest (Art. 6(1)(f) GDPR): you started this journey yourself on your own account, and without a reminder your work simply stays unfinished.

This email contains no offer, no price, and no content from your test — only how far you got and a button to continue. We send at most one reminder per journey, and none once a journey has been idle for 30 days.

You can turn reminders off at any time, free of charge, through the link at the bottom of that email. This is separate from the marketing choice above; if you withdrew that consent, we stop sending reminders as well.

Your data is stored in several locations:

— Database (Supabase): your account, answers, scores, and report are stored in a secured database hosted by Supabase. The connection is encrypted (TLS) and access is limited to authorized systems.

— Your browser (localStorage): a copy of your session data is stored locally in your browser so you don't lose your progress. You can delete this data by clearing your browser data or logging out.

— Backend server (Railway): our server temporarily processes your answers to generate the AI report. Answers are not permanently stored on the server.

We measure how the site is used. Part of that works without cookies and is always on; Google Analytics and Sentry in your browser start only after you consent in the cookie banner. The cookie policy describes, per measurement, what is stored on your device.

— Our own visitor counter (always on): for every page you open, our server receives the path, the referring site and any campaign codes. We do not store your IP address or browser details; we only derive a one-way code (hash) from them using a secret key and the date. That code changes every day, so visits on different days cannot be linked. This lets us count visitors per day and recognise bot traffic.

— Vercel Web Analytics and Speed Insights (always on): cookieless statistics on page visits and loading speed, with the page, the referring site, your country, device type and browser. Vercel recognises a visitor for at most 24 hours through a hash of the request; Speed Insights does not link measurements to a visitor.

— Origin and report usage (always on): on your first visit, your browser keeps which site or campaign brought you here. If you create an account, we store that once with your account. When you are logged in, we record per day whether you opened your report and whether you downloaded it as a PDF, so we know whether reports are read.

— Google Analytics 4 (after consent): sets cookies only after you consent. Without consent, the Google tag sends Google a cookieless signal per page: that the page was visited, your consent choice, the time, your browser and the referring page.

— Sentry in your browser (after consent): receives error reports, measures loading speed on a share of visits and, with Session Replay, records 1 in 10 visits plus the moments before every error. In those recordings all text and input fields are masked and images are blocked; they do show where you click and how you scroll.

We share your data with the following parties that help us deliver the service:

— Supabase (EU): database hosting and authentication. Supabase processes your account data and test data.

— Anthropic (US): your test responses and computed scores are sent to the Claude AI API to generate your personality report. Anthropic does not retain this data for training purposes under their data processing agreement.

— Google (US): if you sign in via Google, Google shares your name and email address with us through OAuth. Google also receives the visitor statistics of Google Analytics 4, as described above.

— Railway (EU/US): hosting of our backend server that temporarily processes your data.

— Vercel (US): hosting of the frontend website, and cookieless statistics on visits (Web Analytics) and loading speed (Speed Insights). Vercel may log technical data such as IP addresses.

— Sentry / Functional Software (US): error tracking and performance monitoring. When you consent via the cookie banner, Sentry sends error reports, performance measurements and session replays from your browser to their servers to help us identify technical issues. In the replays all text and input fields are masked. Separately, our own server always reports errors to Sentry, without IP addresses or login credentials and without the content of requests to your report and your account.

— Stripe (Ireland/US): payment processing. Stripe receives what you enter on the payment screen, such as your email address and payment details, and from us only an internal account and journey number; no test answers or scores. For part of that processing, such as fraud prevention and legal obligations, Stripe is a controller in its own right.

— Resend (US): sending email, such as the notice that your report is ready, reminders, marketing emails if you opted in, and internal notifications. Resend receives your email address and the content of the email and processes delivery, bounce, complaint, and click events.

Transfers outside the EU: Anthropic, Google, Railway, Resend, Sentry, Stripe, and Vercel (also) process data in the United States. Google, Resend, Sentry, Stripe, and Vercel are certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision; their agreements also include the European Commission's standard contractual clauses (SCCs) as a fallback. For Anthropic and Railway, the standard contractual clauses (SCCs) in their data processing agreements apply. You can request a copy of these safeguards at remco@innerscape.nl.

Appropriate data processing agreements are in place with all these parties, or their standard privacy terms apply.

At the end of your report you can voluntarily give feedback: two ratings and an optional text field. You do not have to fill it in — it changes nothing about your report or your account.

What you write is stored alongside your journey and sent as an internal notification to our own address, via Resend. That notification contains your answers and the session number, not your name or email address.

We use this feedback only to improve report quality. Publication as an anonymous quote on the site happens only if you explicitly consent when submitting.

You can withdraw that consent at any time with the button at the end of your report, without giving a reason. We also record which version of the consent wording you saw, so it stays clear what exactly you agreed to.

On some test pages you can take one questionnaire for free, without an account. We ask you for no consent there, because nothing about you reaches us: your answers and scores stay in your own browser (localStorage) and are linked to no account.

What we do store is a counter: which questionnaire was started and finished, in which language, on which page and when — under a random identifier your browser generates itself. No answers, no scores, no name, no email address, no IP address.

If you create an account afterwards, we link that identifier to your account so we know the test led to a sign-up. Your answers only move into your journey at the moment you give consent for processing them on the preparation page — before that they do not leave your browser.

If you take it no further, the test disappears from your browser after seven days. The identifier in our counter is cleared after those same seven days; the counters themselves remain, no longer traceable to anyone.

We do not retain your data longer than necessary:

— Account data, test answers, scores, and reports: as long as your account is active. After account deletion, all data is permanently erased within 30 days.

— Feedback on your report: as long as your account is active, then erased with the rest of your data. The internal notification email is deleted within 12 months.

— Technical log data: maximum 90 days.

— Origin at sign-up and report usage: as long as your account is active, then erased with your account.

— Our own visitor counter: the counts (page, referrer, campaign and the daily code) are kept without an end date. They contain no IP address, no browser details and no code that is valid for longer than a day.

— Local browser data (localStorage): until you delete it yourself or log out.

— Free single test: seven days in your browser; the identifier in our counter is cleared after seven days.

Under the GDPR, you have the following rights:

— Right of access: you can request which data we process about you.

— Right to rectification: you can have incorrect data corrected.

— Right to erasure: you can request deletion of all your data.

— Right to data portability: you can request your data in a structured format.

— Right to object: you can object to the processing of your data.

— Right to withdraw consent: you can withdraw your consent for processing special category data at any time. This does not affect the lawfulness of prior processing.

To exercise any of these rights, contact us at remco@innerscape.nl. We will respond within 30 days.

You also have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

We take appropriate measures to protect your data:

— All connections are encrypted with TLS/HTTPS.

— Passwords are never stored in readable form — only as cryptographic hashes.

— Database access is restricted to authorized systems via secured API keys.

— Our application is regularly updated to prevent security issues.

We may update this privacy policy from time to time. For significant changes, we will inform you through the app or by email. The date at the top of this policy indicates when it was last updated.

We recommend reviewing this policy regularly.

Do you have questions about this privacy policy or how we handle your data? Contact us:

Innerscape

remco@innerscape.nl

For complaints about the processing of your personal data, you can also contact the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl.