First month free – book a short demo and start risk-free. Claim your free month →
domli

Privacy statement

Last updated: 26 October 2026

This statement explains how Domli handles personal data on this website and as a service provider. Domli is a hosted customer inbox for small businesses.

1. Who we are

Majid El Mehammedy, trading as Domli. VAT ID NL005099758B32. Address: De Vennen 14, 9755PS Onnen. Contact for privacy questions: contact@domli.nl.

2. Two roles

  • Controller: for this website, our sales contact and our own customer administration, we decide why and how your data is used.
  • Processor: when a business uses Domli to talk to its own customers, that business is the controller and we process the conversation data on its behalf, under a data processing agreement. If you are a customer of such a business, please contact that business first about your data.

3. What we process, why, and on what basis

  • Contact form and demo requests (name, company, email, message): to answer your request. Basis: your request and our legitimate interest in replying. Kept for up to 12 months.
  • Customer account and billing data (name, company, email, plan, invoices): to deliver and bill the service. Basis: contract and legal obligation (tax records are kept for 7 years).
  • Chat on this website: if you use the chat button, your messages and the details you give are stored in our own Domli inbox to answer you. Basis: your request and our legitimate interest.
  • Conversation data of our customers (messages, names, email addresses, phone numbers, attachments, metadata, IP address): to run the inbox for the business concerned, as processor.
  • Technical data: basic server logs for security and troubleshooting. Basis: legitimate interest. Kept for a short period.

We do not use your data for advertising and we do not sell it. We do not build profiles of website visitors.

4. AI features

Domli offers optional AI features that a customer can switch on. When they are on, text is sent to our AI provider, Anthropic (Claude), which is located in the United States:

  • AI assistant: only the text of the single customer message is sent, without name, email address or conversation history, together with the business information the customer provided.
  • Writing assistant for agents (suggest a reply, rewrite, summarize): the relevant conversation text is sent when an agent uses it.

The AI never decides on its own about prices, complaints or health matters; those go to a person. AI features are off unless the customer enables them. Transfers to the United States rely on appropriate safeguards, such as the EU-US Data Privacy Framework or standard contractual clauses.

5. Who receives your data

Only providers we need to run the service (processors), under agreements that protect your data:

  • Hosting and server infrastructure within the EU (VPS, database, backups).
  • Email service for our mailbox and outgoing messages.
  • Anthropic, only if AI features are enabled (see section 4).
  • For WhatsApp: Meta, under the customer's own agreement with Meta.

We share data with authorities only if the law requires it. A current list of processors is available on request.

6. Where your data is stored

Data is stored on servers in the European Union. Apart from the optional AI features described above, we do not transfer personal data outside the European Economic Area.

7. Retention

  • Contact requests: up to 12 months.
  • Customer account data: while the contract runs, then as long as the law requires (invoices 7 years).
  • Conversation data: as long as the customer instructs. At the end of the contract we delete it within 30 days, or return it as an export on request.
  • Backups: 14 days. Data deleted from the system disappears from backups within that period.

8. Security

We use encrypted connections (TLS), access controls, separate accounts per customer, encrypted storage of channel credentials, regular software updates and daily backups. The AI service does not store message content in its own logs; it only counts usage.

9. Your rights

You can ask for access to your data, correction, deletion, restriction, a copy (portability) and you can object to processing. Email contact@domli.nl; we respond within one month. For conversations with one of our customers, we pass the request to that business, which is responsible for it, and help where needed. You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

10. Cookies and similar technology

This website uses only a functional session cookie to protect the contact form. The chat button stores a small identifier in your browser so your conversation continues. We use no tracking, analytics or advertising cookies. Because the cookies are functional, no consent banner is required.

11. Health data

Domli is not meant for healthcare providers or for sending health or other special-category data. Please do not send such data through the chat or contact form.

12. Changes

We may update this statement. The date at the top shows the latest version. For significant changes we inform our customers directly.

Book a demo