Last updated 14 July 2026
This policy explains what personal data we collect and why, for AgentsPoppy (agentspoppy.com) and the apps we operate ourselves, including MailPoppy. We keep it deliberately small: we collect the minimum needed to run your account and take payment.
The data controller is Olly Digital, established in Amsterdam, the Netherlands (registered with the Dutch Chamber of Commerce, KvK no. 68745532). For any privacy question or request, contact us at support@agentspoppy.com.
When you sign in (for the developer dashboard or admin tools) we receive your email address and basic profile from your chosen sign-in provider (Google). Legal basis: performance of our contract with you.
When you buy something, our payments provider Stripe processes your name, email, billing address, country, any VAT/tax identifier, and the transaction. Card numbers are handled by Stripe — we never see or store them. We keep the resulting invoice/transaction records. Legal basis: performance of our contract, and our legal obligation to keep tax records.
A purchase creates a small record: an opaque buyer identifier, which product was bought, what it applies to (for example a domain name), and the subscription's status. Legal basis: performance of our contract.
Like any website, our hosting logs technical information such as your IP address, browser/device type and requests, and we use strictly necessary cookies/tokens to keep you signed in and to protect the service. Legal basis: our legitimate interest in running, securing and debugging the service.
We rely on a small number of processors, each under a data-processing agreement:
Where a processor operates outside the European Economic Area (for example in the United States), transfers are covered by the appropriate safeguards, such as the EU Standard Contractual Clauses or an adequacy decision. Your own AWS account is yours, not our processor.
We keep account and purchase data for as long as you have an account with us, and afterwards only as needed to meet legal obligations — in particular, billing and tax records are retained for the period Dutch law requires (currently seven years). Technical logs are kept for a short period.
Under the GDPR you have the right to access, correct, delete, restrict or port your personal data, and to object to certain processing. To exercise any of these, email support@agentspoppy.com. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Some apps in the AgentsPoppy directory are made and sold by independent developers. When you buy one, that developer is the seller and is responsible, as controller, for how they handle any data you give them; we act only as the payment facilitator. Their own privacy terms apply to that relationship.
We may update this policy; the "last updated" date above always reflects the current version. Material changes will be highlighted where we can.
Questions? support@agentspoppy.com