Last updated on October 26, 2026.
We are Soigné B.V., registered in the Netherlands under number 92772390. We build software that helps hospitality businesses hire, manage and pay their teams. This statement explains what we do with your personal data when we decide why and how it is used. Questions go to legal@soigne.app.
This statement applies when you:
This statement does not apply when you apply for a job with an employer that uses Soigné, or when that employer hires you and manages your employment, schedule, absence or pay in the Services. We then act as processor on the employer’s behalf under our Data Processing Addendum, and the employer’s own privacy statement applies to you. We still explain below how the Services handle your data in those cases, so you know what to expect. The business relationship with our customers is governed by our Terms of Service.
We play two roles, and which one applies decides who you turn to with questions about your data.
| Situation | Our role | What governs it |
|---|---|---|
| You visit our websites, subscribe to the newsletter, ask a question, contact support or give feedback | Controller | This statement |
| You apply for a job through an application form or job page powered by Soigné | Processor; the employer is controller | DPA and the employer’s privacy statement |
| You are hired, get an employee account in our iOS or Android app, and the employer manages your employment, schedule, absence or pay in the Services | Processor; the employer is controller | DPA and the employer’s privacy statement |
| You hold a user account as a team member of a customer | Processor for your account inside the Services; controller for the service, billing and security notices we send you | DPA and this statement |
If you send us a privacy request about data we process for an employer, we forward it to that employer and may tell you we have done so. The employer answers the request; we help where needed.
We only collect what each purpose needs. The first table covers what we process as controller.
| Purpose | Data we use | Legal basis |
|---|---|---|
| Run our websites and keep them secure | Server logs: IP address, pages requested, browser and device type | Legitimate interest |
| Answer questions, support chats and feedback | Name, email, phone, company, country, Soigné ID, the content of your message | Legitimate interest; performance of an agreement where you are a user |
| Send our newsletter | Email address, subscription preferences, opens and clicks | Consent |
| Send service, billing and security notices to customer account holders | Name, email, phone, role, login and action logs | Performance of the Agreement with your employer; legitimate interest |
| Improve the Services | Aggregated or anonymised usage data that no longer identifies you | Legitimate interest |
| Keep records the law requires us to keep | Invoices, contracts, correspondence | Legal obligation |
The second table shows what the Services process for your employer. The employer decides these purposes and their legal basis; we act on its instructions.
| What the employer uses the Services for | Data the Services process |
|---|---|
| Handle your job application and communicate with you | Contact details, personal details (gender, age, country), address, CV, work history, qualifications, motivation, preferences, correspondence, interview notes, assessments |
| Hire you and keep your employee profile | Identity and contact details, date of birth, nationality, copy of ID or passport, BSN, employment contract, function, contract type, salary and wage components, IBAN, work location, hours |
| Schedule shifts and register hours | Rostered and worked shifts, clock-in and clock-out |
| Register leave and absence | Leave and sickness absence (health data) |
| Run payroll | Salary, wage components, wage-cost and employer-cost data |
| Give you the employee app | Email and hashed password, push token (APNs/FCM), device model, OS version, app version |
| Connect integrations the employer installs | The data the employer chooses to share with that integration |
We never use your data for a purpose that is incompatible with the one we collected it for.
We do not sell your data. As controller, we share it in three cases only.
Where we act as processor, your employer decides who receives your data. The same providers below process it for the employer under the DPA.
| Provider | What they do for us | Processing location |
|---|---|---|
| Microsoft B.V. | Hosting, storage and processing | Netherlands (EEA) |
| MongoDB Limited | Database storage and caching | Netherlands (EEA) |
| ActiveCampaign, LLC (Postmark) | Email delivery | United States |
| Intercom R&D Unlimited Company | Support chat and our newsletter (name, email, phone, company, country, Soigné ID and what you write in the chat) | United States |
| Bird B.V. | WhatsApp message delivery | EEA |
| Auth0 by Okta | Single sign-on for the web platform (name, business contact details, email) | EEA |
| Supabase, Inc. | Sign-in for the employee app (name, email) | EEA |
| Firebase (Google) | Push notifications to the employee app | EEA |
Transfers outside the EEA: Postmark and Intercom process data in the United States. For these we rely on the European Commission’s standard contractual clauses or another valid transfer mechanism under Chapter V GDPR. You can ask legal@soigne.app for a copy of the safeguards we use.
We keep this list in step with Annex 2 of our Data Processing Addendum. When we add or change a provider, we update this page.
We keep your data only as long as the purpose needs it, then delete or anonymise it.
| Data | How long |
|---|---|
| Job applications | 4 weeks after the employer disqualifies your application, or 1 year if you opted in to the employer’s talent pool |
| Employee profile and employment data | According to the employer’s retention settings in the Services, and at most until 30 days after its subscription ends |
| Newsletter subscription | Until you unsubscribe; we then keep only the record that you opted out |
| Questions, support chats and feedback | As long as needed to handle your request and follow up |
| Customer account holder contact data | For the term of your employer’s subscription, plus 30 days after it ends unless the employer asks for deletion or return sooner |
| Server logs | Only as long as needed for security monitoring |
| Invoices and other legally required records | Seven years, as Dutch tax law requires |
After a customer’s subscription ends we may delete all data we hold for that customer, including your account, 30 days later. Employers must export what they need in time.
We apply the same security measures to your data as we commit to in Annex 3 of our DPA.
If a breach affects your data, we investigate without delay, limit the damage, and notify the Dutch Data Protection Authority and you where the GDPR requires it. Where we process for an employer, we inform the employer without undue delay and support its communication to you.
You can ask us at any time to:
Send requests to legal@soigne.app. We may ask you to prove your identity so we do not hand your data to someone else. We answer within one month; for complex requests we may take up to two months more, and we tell you if we do.
If your request concerns data we process for an employer, we forward it to that employer and let you know. The employer responds; we assist them.
If you are not happy with how we handle your data or your request, tell us first. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your own country.
Cookies: we do not set cookies of our own on our websites.
Connected tools and AI agents: the Services let customers connect third-party services, integrations and AI agents through our APIs and agent interfaces. The customer decides what to connect, who gets a token and how much access it has. Once data reaches a connected tool, it has left the Services and that provider’s terms apply, not this statement. We use your data to provide the Services and, in aggregated or anonymised form, to improve them.
Changes to this statement: we post the new version on this page with its date. If a change materially affects how we use your data, we let you know by email or in the app where we can, before it takes effect.
Contact: Soigné B.V., registered in the Netherlands under number 92772390, Sarphatistraat 644, 1018 AV Amsterdam, legal@soigne.app.