1. Who we are
Triggerize Studio is the application. WorldEmp Holding B.V., established in the Netherlands, is the rights holder and data controller for the processing described in this Privacy Policy. Triggerize acts only as the execution organisation and operator under the responsibility of WorldEmp Holding B.V. In this Privacy Policy, “we”, “us” and “our” refer to WorldEmp Holding B.V., unless stated otherwise.
Triggerize Studio is a multi-tenant SaaS application operated by Triggerize under the responsibility of WorldEmp Holding B.V. The application helps marketing teams measure and improve brand visibility across AI search engines, traditional search and social media.
For personal data relating to users of Triggerize Studio, such as account, authentication and identity data, WorldEmp Holding B.V. acts as the data controller.
For personal data in customer materials or workspaces, WorldEmp Holding B.V. acts as processor on behalf of the customer where the customer determines the purposes and means. WorldEmp Holding B.V. remains controller for account, authentication, security, billing, compliance and platform-management data. Customer processing is governed by the Data Processing Agreement with WorldEmp Holding B.V.
For privacy or data protection enquiries, contact us at info@triggerize.nl.
2. What data we collect
Depending on your use of Triggerize Studio, we may process:
- Account & identity data: name, email address, profile image, and a securely hashed password if you sign in using a password.
- Authentication & security data: multi-factor authentication secrets (encrypted), hashed backup codes, IP address, browser and user-agent information, trusted-device tokens, and authentication attempt records.
- Single sign-on data: where you connect Google or Microsoft, the account identifiers and authentication tokens returned by those providers.
- Workspace & collaboration data: organisation membership, roles, access permissions, comments, @mentions, and activity logs.
- Billing data: subscription and payment status. Payment details are handled directly by our payment service provider, Mollie. We do not store complete payment card or bank account credentials.
- Product & usage data: domains, keywords, prompts, content and other submitted information, plus telemetry needed to operate, improve and secure Triggerize Studio.
- Application logs: operational logs in which direct identifiers such as email addresses, user or organisation IDs and IP addresses may be pseudonymised using a keyed hash before storage.
3. Why we process your data
We process personal data only where we have a valid legal basis under the GDPR.
| Purpose | Legal basis |
|---|---|
| Providing Triggerize Studio and managing your account | Performance of a contract, Art. 6(1)(b) GDPR |
| Security, MFA, fraud and abuse prevention | Legitimate interests, Art. 6(1)(f) GDPR |
| Billing and financial administration | Contract and legal obligation, Art. 6(1)(b) and (c) GDPR |
| Product improvement and analytics | Legitimate interests and, where required, consent |
| Non-essential cookies and marketing | Consent, Art. 6(1)(a) GDPR |
Where we rely on legitimate interests, we consider the impact on your privacy and balance our interests against your rights and freedoms.
4. AI features
Triggerize Studio uses artificial intelligence for features such as content drafting, keyword classification, recommendations, analysis and brand-visibility scoring.
AI-generated content supports users but does not replace their judgement. Content intended for publication can be reviewed, edited and corrected before publishing.
We do not use customer workspace data, prompts or outputs to train third-party foundation models. AI providers, including Microsoft Azure OpenAI and Mistral AI, are subject to contractual and technical safeguards.
More information about cookies and related technologies is available in our Cookie Policy and, where applicable, through notices displayed within Triggerize Studio.
5. Who we share data with
We use selected service providers to operate, secure and improve Triggerize Studio. Where these providers process personal data on our behalf, appropriate data-processing arrangements are in place.
WorldEmp Holding B.V.’s principal service providers and sub-processors for Triggerize Studio include:
- Microsoft Azure: cloud hosting, databases, storage, email infrastructure and Azure OpenAI services.
- Mistral AI: AI and LLM-related functionality, including visibility analysis and scoring.
- Serper.dev: search-engine results data.
- Google: services including PageSpeed Insights and related performance data.
- Mollie: subscription and payment processing.
We do not sell your personal data.
A current list of relevant sub-processors is maintained as part of our compliance documentation and is available on request.
6. International data transfers
We aim to process and store Triggerize Studio platform data and AI-related data within the European Economic Area where reasonably possible.
Some service providers may process personal data outside the EEA, including in the United States. Where personal data is transferred outside the EEA, we use appropriate safeguards as required under the GDPR.
Safeguards may include an adequacy decision, the EU-US Data Privacy Framework, Standard Contractual Clauses and supplementary technical or organisational measures.
7. How long we keep your data
We retain personal data only as long as needed for the purposes collected, including contractual, security, compliance and legal requirements.
Our indicative retention periods include:
- application logs: up to 90 days;
- AI model response records: up to 180 days;
- deleted or anonymised accounts: remaining personal data is generally purged within 30 days, subject to legal and technical requirements;
- expired authentication tokens and trusted-device records: removed when no longer required;
- billing and financial records: retained for the period required by applicable law.
Different periods may apply where needed for legal obligations, legal claims, fraud prevention or contractual obligations.
Our full retention schedule is available on request.
8. Your rights
Under the GDPR, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete personal data;
- request deletion of your personal data;
- restrict certain processing;
- object to certain processing;
- receive your personal data in a portable format;
- withdraw consent where processing is based on consent;
- not be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you.
Where available, you can download your data and delete your account through your Triggerize Studio profile settings.
You can also exercise your privacy rights by contacting info@triggerize.nl.
We normally respond to valid requests within one month, subject to any lawful extension.
You also have the right to lodge a complaint with supervisory authority. In the Netherlands, the competent authority is the Autoriteit Persoonsgegevens.
9. Security
We use appropriate technical and organisational measures designed to protect personal data.
Depending on the relevant system, these measures include:
- encryption in transit using TLS;
- encryption at rest;
- application-level encryption for sensitive authentication information;
- role-based access controls;
- multi-factor authentication;
- audit logging;
- pseudonymisation of selected operational logs;
- least-privilege infrastructure and access policies.
No online service can guarantee absolute security. We review our measures and, where legally required, notify affected parties and the supervisory authority of qualifying personal data breaches without undue delay.
10. Children
Triggerize Studio is a business application and is not directed at children or intended for individuals under the age of 16.
11. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to Triggerize Studio, service providers, legal requirements or privacy practices.
Where changes are material, we may notify users through Triggerize Studio, by email, or through another appropriate method.
The “Last updated” date at the top of this Privacy Policy indicates when this version was most recently revised.
12. Contact
Triggerize Studio
Application operated by Triggerize under the responsibility of WorldEmp Holding B.V.
Rights holder and data controller: WorldEmp Holding B.V.
The Netherlands
Privacy and data protection enquiries:
info@triggerize.nl
This Privacy Policy supports WorldEmp Holding B.V.’s transparency commitments for Triggerize Studio. It does not constitute legal advice.