Who is responsible for your data
Recto
Chau. de Boondael 166, 3e, Ixelles, 1050 Brussels, Belgium
Enterprise number 1044.114.136
VAT BE1044114136
We are the data controller for the personal data described here. You can reach us at hello@rectobrand.com.
What we collect
- What you write in the brief. The business idea, audience, preferences and any other text you enter in the intake form.
- Your email address, so we can send the result and contact you about your order.
- Order records. Order reference, which product, the amount, currency and payment status. We never see or store your card details: those stay with our payment provider.
- Messages you send us, your name and contact details, and our replies.
- Analytics, if you allow it. Cloudflare Web Analytics measures visits and page performance without cookies. It does not log URL query strings or track people across websites.
- Technical logs kept by our hosting provider, which normally include an IP address and are used to keep the service running and secure. Cloudflare
We do not use advertising trackers, social media pixels or profiling. The website sets no cookies.
Why we use it, and on what legal basis
- To produce and deliver what you asked for. Performance of a contract, GDPR Article 6(1)(b).
- To take payment and keep accounting records. Legal obligation, Article 6(1)(c). Belgian VAT rules require invoices and related accounting documents to be kept for ten years.
- To answer your questions and keep the service secure. Legitimate interests, Article 6(1)(f).
- Analytics, only if you allow it. Consent, Article 6(1)(a). You can withdraw it at any time from cookie settings.
Artificial intelligence
Recto produces its outputs with the help of AI models working to a fixed set of editorial rules. Relevant information from your brief is sent to third-party AI providers to generate your result. Our current providers are OpenAI and Google (Gemini). We update this policy when the providers or processing arrangements change.
No decision with a legal or similarly significant effect on you is made by automated means.
Who else handles your data
We use the following service providers to run Recto:
- Tally hosts the intake forms.
- n8n Cloud hosts and runs the automation that moves your submission through the steps.
- Google stores order records and generated files, in Sheets and Drive.
- Stripe processes payments and holds the card data we never see.
- Google Workspace (Gmail) delivers the emails we send you.
- HTML/CSS to Image renders generated layouts into image files.
- AI providers, currently OpenAI and Google (Gemini), help generate the outputs.
- Cloudflare serves this website.
- Cloudflare Web Analytics measures visits and performance only with your consent. Its reports cover the previous six months.
We do not sell your data and we do not share it for anyone else's marketing.
Transfers outside the European Economic Area
Some of these providers are established in the United States or process data there. Where that happens we rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework, or on standard contractual clauses. You can contact hello@rectobrand.com to request information about the safeguards applicable to your data and a copy of the relevant contractual safeguards, subject to necessary redactions.
How long we keep it
- Invoices and related accounting documents: ten years, counted from 1 January following their issue, as Belgian VAT rules require.
- Your brief and the outputs generated from it: 24 months after delivery, so you can ask for your files again, then deleted.
- Email correspondence: 24 months after the last exchange, except for records that must be retained separately for accounting obligations or an ongoing dispute.
- Your cookie choice: 180 days, stored in your own browser.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. Where we rely on consent you can withdraw it at any time, without affecting what we did before you withdrew it.
Write to hello@rectobrand.com and we will answer within one month.
If you think we have handled your data badly, you can complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be. You can also complain to the authority where you live.
Security
Access to your data is limited to the people and services that need it, and our providers are chosen for their own security practices. No service can promise perfect security, and we will tell you and the authority without undue delay if a breach puts your rights at risk.
Children
Recto is a business tool and is not intended for anyone under 16.
Changes
If we change this policy we will update the date at the top. If the change matters to you, we will tell you by email.