Percol — Privacy Policy

Last updated: 16 July 2026 · Version: 2.0

In one paragraph

Percol is a simulator. You type figures about your finances, we compute what they imply under Belgian rules, and we show you the result. The only thing that identifies you is your email address — we never ask for your name, your address, your phone number, your national register number, or your bank credentials. There is no bank connection: nothing is ever imported. You can use the whole free simulator without an account, and then your figures stay in your browser and never reach us at all.

1. Who is responsible

No Data Protection Officer has been appointed: our processing does not meet the criteria of Article 37 GDPR. Write to hello@percol.studio for anything on this page.

2. What we process, why, and on what legal basis

2.1 Without an account — the free simulator

Your figures never reach our servers. The simulation runs entirely inside your browser: what you type is computed on your device. This is an architectural fact, not a promise — the calculation code is downloaded and executed locally. Two exceptions, both under your control: the assistant (§2.3) and measurement (§2.5).

2.2 With an account

Those figures are personal data and we treat them as the most sensitive thing in this product. They are yours: we do not analyse them to profile you, we do not use them to target advertising, we do not sell them, and we share them with nobody beyond the processors in §4, who host them on our instructions.

2.3 The assistant

If you type a question into the assistant, your message and the figures currently in the simulator are sent to Anthropic, our language-model provider, so that your sentence can be translated into simulator parameters. This applies with or without an account. The assistant never produces financial numbers: it returns parameters only, and our own engine computes every figure you see.

• Sent: your message, up to the last 8 messages of the conversation (truncated), your current simulator values in euros, your language. Your email is not sent.
• Kept by us: the message, the parsed result and a token count — to operate the feature, detect abuse, and improve accuracy. Retention: 30 days.
• Legal basis: Art. 6(1)(b) to provide the feature; Art. 6(1)(f) — legitimate interest — for the abuse and quality logs.
• Transfer outside the EU: Anthropic is established in the United States. ``

If you prefer that nothing leaves your device: do not use the assistant. Every field is editable directly, and typing in a field sends nothing anywhere.

2.4 Abuse prevention

The assistant is free and open, so we cap use per browser session and per IP address (a limited number of messages per day). The IP is a counter key held in memory; it is not written to our database and not linked to your account. Legal basis: Art. 6(1)(f) — keeping a free service usable and affordable.

2.5 Measurement

We use PostHog (EU servers) to see which steps people complete and which they abandon — in aggregate. It runs cookieless: nothing is stored on your device, no cookie, no identifier that follows you between visits, and no profile is built about you — not even an anonymous one. That is why you are not asked to accept anything: there is nothing to consent to. Text you type into fields is masked and is never captured. Legal basis: Art. 6(1)(f) — legitimate interest in knowing whether the product works, at the lowest possible cost to you.

2.6 Payment

Payment is handled by Stripe Payments Europe, Ltd.. We never see or store your card details. We receive only: that a payment succeeded, the amount, and a reference. The provider processes your payment data under its own privacy policy. Invoices and accounting records are kept for 7 years as Belgian law requires (Art. 6(1)(c) — legal obligation).

3. What we deliberately do not do

• No bank connection. We cannot read your accounts and never ask to.
• No name, address, phone number, national register number — and no date of birth (we ask for a birth year, because the simulation needs your age).
• No advertising, no advertising cookies, no affiliate links, no data sales. You are our only customer; that is the business model, and it is why there is nothing to sell about you.
• No automated decision-making producing legal effects (Art. 22). The simulator gives estimates you asked for; it decides nothing about you.
• No credit scoring, no lead generation, no sharing with banks, brokers or insurers.

4. Who processes data for us

Each acts on our instructions under a data-processing agreement, except where it acts as its own controller (payments). ``

5. How long we keep things

Deleting your account deletes your figures, your scenarios and your entitlements. Accounting records survive, because the law requires it.

6. Your rights

At any time and free of charge you may access your data, correct it, delete it, take it with you (portability), object to processing based on legitimate interest, and restrict processing. Write to hello@percol.studio; we answer within one month.

You may also complain to the Belgian Data Protection Authority — Autorité de protection des données / Gegevensbeschermingsautoriteit, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, autoriteprotectiondonnees.be.

7. Security

Traffic is encrypted (HTTPS). Access to saved data is bound to your account: every request is verified server-side against your identity, and the database independently enforces row-level ownership. Sign-in uses a one-time code sent to your email — there is no password to leak, and we never authenticate you through a link in an email (mail scanners follow links; a code cannot be followed).

8. Changes

We will post any material change here with a new version number and date, and — if the change affects you — tell you by email.