Back to App

Privacy Policy

Selectronyx B.V. — Last updated: 28 March 2026

We take your privacy seriously. This policy explains what data we collect, why we collect it, and your rights under the GDPR and applicable privacy laws.

1. Who We Are

Selectronyx B.V. (“Selectronyx”, “we”, “us”, “our”) is the controller of your personal data for the FairSpec platform (“the Service”).

Registered name: Selectronyx B.V.

Country: The Netherlands

Contact: legal@selectronyx.com

2. Data We Collect

2.1 Account Data

  • Name and email address (provided at registration or via Google OAuth)
  • Organisation name (optional)
  • Subscription tier and billing status

2.2 Usage Data

  • Bills of Materials (BOMs) you upload, including component part numbers (MPNs)
  • Search queries and parts you analyse
  • Features you use and pages you visit within the Service
  • API request logs (if you use API access)

2.3 Technical Data

  • IP address and browser/device type (for security and fraud prevention)
  • Session tokens (stored in secure HTTP-only cookies)
  • Timestamps of logins and key actions

2.4 Payment Data

Payment card details are processed exclusively by Stripe, Inc. and are never stored on our servers. We only store your Stripe customer ID and subscription status.

2.5 Data We Do Not Collect

  • We do not collect special category data (health, ethnicity, biometrics, etc.)
  • We do not track you across third-party websites
  • We do not sell your data to any third party

3. How We Use Your Data

PurposeData Used
Provide and operate the FairSpec ServiceAccount data, BOM data, usage data
Process subscription paymentsEmail, Stripe customer ID
Send transactional emails (receipts, alerts)Email address
Respond to support requestsEmail, account data
Detect fraud and ensure securityIP address, session tokens, logs
Improve the Service (aggregated analytics)Anonymised usage patterns
Comply with legal obligationsAs required by law

5. Data Sharing & Third Parties

We share your data only with trusted sub-processors necessary to operate the Service. We do not sell your data.

Sub-processorPurposeLocation
Vercel, Inc.Hosting and edge deliveryUSA (SCCs)
MongoDB Atlas (MongoDB, Inc.)Database storageEU region
Stripe, Inc.Payment processingUSA (SCCs)
Google LLCOAuth sign-in (Google accounts)USA (SCCs)
Nexar, Inc.Electronic component data APIUSA (SCCs)
GoHighLevel (HighLevel, Inc.)CRM and transactional notificationsUSA (SCCs)

SCCs = Standard Contractual Clauses (EU approved mechanism for international transfers under GDPR Art. 46).

6. Data Retention

  • Active accounts: Data is retained for as long as your account is active.
  • Closed accounts: Personal data is deleted within 90 days of account closure, except where legal retention requirements apply.
  • Financial records: Billing and transaction records are retained for 7 years to comply with Dutch and EU tax law (Art. 52 BTW-wet).
  • Component data & BOM cache: Anonymised part data may be retained for service improvement. Your identified BOM uploads are deleted with your account.
  • Server logs: Security logs are retained for 90 days then automatically purged.

7. Your Rights

Under the GDPR you have the following rights. To exercise any of them, email legal@selectronyx.com. We will respond within 30 days.

Right of access (Art. 15)

Request a copy of the personal data we hold about you.

Right to rectification (Art. 16)

Ask us to correct inaccurate or incomplete data.

Right to erasure (Art. 17)

Request deletion of your data where no legal basis for retention exists.

Right to restriction (Art. 18)

Ask us to limit processing of your data in certain circumstances.

Right to portability (Art. 20)

Receive your data in a structured, machine-readable format.

Right to object (Art. 21)

Object to processing based on legitimate interests or for direct marketing.

Right to withdraw consent

Withdraw any previously given consent at any time without affecting past processing.

Right to lodge a complaint

File a complaint with the Dutch DPA (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

8. Cookies & Local Storage

We use a minimal set of cookies required to operate the Service:

CookiePurposeExpiry
next-auth.session-tokenAuthentication session (HTTP-only, secure)30 days
next-auth.csrf-tokenCSRF protectionSession
fairspec-cookie-consentRecords your cookie consent choice1 year

We do not use advertising, tracking, or analytics cookies from third parties. No Google Analytics, Meta Pixel, or similar tools are deployed.

9. Security

We implement appropriate technical and organisational measures to protect your data:

  • All data in transit is encrypted via TLS 1.2+
  • Database access is restricted and encrypted at rest
  • Authentication tokens are stored in HTTP-only, secure cookies
  • Payment data is handled exclusively by PCI-DSS certified Stripe
  • Access to production systems is limited to authorised personnel

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify you directly.

10. Contact & Updates

For any privacy-related questions or to exercise your rights:

Email: legal@selectronyx.com

Controller: Selectronyx B.V., The Netherlands

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users and/or by a prominent notice within the Service at least 14 days before the change takes effect. The “Last updated” date at the top of this page always reflects the current version.

© 2026 Selectronyx B.V. All rights reserved.