Privacy policy
Last updated: 11 October 2026
Nokko is a product of Proppeteer. We handle personal data with care. This policy describes what we process for the website, demo requests and the platform, and what rights you have.
1. Controller
Proppeteer (Belgium) is the controller for the data in this policy. Contact, including privacy questions: info@proppeteer.com.
2. Scope
This policy covers website visitors, contacts who request a demo or information, and platform users acting for an agency. Data an agency processes about its own clients falls under that agency. Where we only follow instructions, we act as a processor, as set out in the customer agreement.
3. What data
Identity and contact details (name, role, agency, email, phone). Account and contract data. File content supplied by the agency. Technical logs (IP, browser, security). Messages you send us.
4. Purposes
Providing the platform (including AI on the agency's own file data), relationship management and demo follow-up, invoicing, security, lawful product improvement and legal obligations. Direct marketing only where permitted.
5. Legal bases
Contract or pre-contractual steps, legitimate interest (security, limited analytics, professional communication), consent where required, and legal obligation.
6. Retention
No longer than needed. Contract records for the relationship plus the statutory limitation period. Invoices up to 7 years where Belgian law requires. Marketing until you withdraw consent.
7. Processors and transfers
We don't sell personal data. Subprocessors (hosting, email, cloud and AI) work under Art. 28 GDPR agreements. For transfers outside the EEA we use appropriate safeguards such as standard contractual clauses.
8. Your rights
Access, rectification, erasure, restriction, objection, portability where applicable, and withdrawal of consent. Requests: info@proppeteer.com. Complaints: Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.
9. Security
Appropriate technical and organisational measures: encryption in transit and at rest, access control and isolation per agency.