Privacy statement
Updated on 5 October 2026.
Who we are
Cardboard builds websites, automation and AI assistants for companies. Questions about your data go to hello@cardboard.site.
What data we process
What you fill in yourself in a form on this site: your name, company, role, email address, phone number, your website and what you tell us. We also count visits to this site, without cookies and without being able to recognise you.
What for
To schedule a call with you, to make the analysis you ask for and send it to you, and to follow up on your question. Nothing else, and we sell nothing on.
Legal basis
You ask us to do something. We process your data to carry out that request (article 6(1)(b) GDPR) and, for following up on it, on the basis of our legitimate interest (point (f)).
AI
George and Harold are AI assistants. For the analysis, Harold only gets your website, your company name and the topics you tick, and looks at what is publicly available about your company. Your name, email address and phone number do not go to the AI model. We use the AI models of Anthropic (Claude). Joris reads every report before it goes out to you.
Who else sees your data
Your request is stored encrypted with our hosting provider Vercel until we collect it. After that it only exists on our own systems. Vercel and Anthropic may process data outside the European Union; this happens on the basis of the European standard contractual clauses or the EU-US Data Privacy Framework.
How long
We keep requests as long as needed to handle your question, and then for twelve months at most, unless we continue working together.
Your rights
You may see, correct or delete your data, and you may object. Email hello@cardboard.site for that. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Cookies
This site sets no cookies. We count visits with Vercel Web Analytics, without cookies and without following you across other sites.
Cardboard Finds
The shop at cardboard.site/finds has its own privacy statement.