Privacy
Who we are
Menzura is a trade name of Avisio Analytics, KvK 78674514, VAT NL003371649B33, Hermitage 122, 1506 TX Zaandam, the Netherlands. We are responsible for the personal data in this statement: what you give us on menzura.ai, as a visitor or as a customer. Questions go to [email protected].
Photos sent through our API are not covered here. Our customers send us photos of their own users to get body measurements back. For those photos we act only on the customer’s instructions, as their processor under our data processing agreement, which customers accept on the dashboard. The customer decides how they are used and answers your questions about them, so read the privacy statement of the company whose app or shop you used. We delete each photo as soon as its measurement is done, delete the measurements 90 days later, and never use photos to identify anyone.
What we process and why
We collect only what we need to give you access, run your account and bill it. We don’t use trackers or advertising, and we don’t sell data.
| What | Data | Why | Legal basis | Kept |
|---|---|---|---|---|
| Access requests | Your email address and message | To answer your request and give you access | Steps you ask for before a contract (Art. 6(1)(b) GDPR) | As long as we need it to handle your request and follow up on it |
| Login | Your email address, and a one-time code stored as a hash | To let you sign in to the dashboard | Contract (Art. 6(1)(b)) | Until the code is used or replaced |
| Account | Email address, API keys (stored as hashes), scans per key and their status | To provide the API and show your usage | Contract (Art. 6(1)(b)) | As long as you have an account |
| Billing | Company name, billing address, VAT number, invoices and scans billed. Card details are handled by Stripe and never reach us | To invoice and collect payment | Contract (Art. 6(1)(b)); tax law (Art. 6(1)(c)) | Invoices and billing records 7 years, as Dutch tax law requires |
| Agreements accepted on the dashboard | For the data processing agreement and bundles: who accepted, for which company, when, the version or terms shown, IP address and browser | Proof of what was agreed | Contract (Art. 6(1)(b)); our legitimate interest in proving it (Art. 6(1)(f)) | As long as you have an account, then 5 years (the Dutch limitation period) |
| Email with us | What you write to info@ or support@ | To help you | Contract, or our legitimate interest in answering (Art. 6(1)(f)) | As long as our contact or customer relationship lasts |
| Security | IP address and browser details, checked by Cloudflare Turnstile and in server logs | To keep bots and abuse out | Legitimate interest (Art. 6(1)(f)) | Server logs up to 7 days |
Who receives your data
These providers help us run Menzura; nobody else gets your data unless the law requires it.
| Provider | What they do for us | Where | Safeguard for the US |
|---|---|---|---|
| Cloudflare | Hosts the website, dashboard, API and database; Turnstile bot checks; forwards email sent to us | Global network, US company | EU–US Data Privacy Framework |
| Stripe | Checkout, card payments, invoices and the billing portal. Stripe is also responsible for payment data itself, under its own privacy policy | EU and US | EU–US Data Privacy Framework and standard contractual clauses |
| Resend | Sends our emails, such as login codes and billing notices | US | EU–US Data Privacy Framework |
| Google (Gmail) | Stores email you send us | US company | EU–US Data Privacy Framework |
Cookies
We set one cookie, and only when you sign in: mz_session, which keeps you logged in to the dashboard for up to 30 days. It is strictly necessary, so we don’t ask for consent. We use no analytics or advertising cookies. Cloudflare Turnstile checks your browser on the login and access forms to tell people from bots; it isn’t used for advertising.
Your rights
You can ask us to see, correct or delete your data, to limit or object to its use, or to receive it in a common file format. Email [email protected] and we answer within one month. Some data we must keep despite a request, such as invoices for tax law.
If you think we handle your data wrongly, please tell us first. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
We update this statement when our processing changes, and change the date at the top. Customers hear about important changes by email.