Skip to content
Fruitful

Privacy policy

This translation is provided for information. The Dutch version is binding.

Version: v1.1, October 2026

This is a translation of the Dutch privacy policy. In the event of any difference between the two, the Dutch version is binding.

This privacy policy describes how Fruitful B.V. ("Fruitful") processes personal data, in accordance with the General Data Protection Regulation (GDPR). It covers the Fruitful platform and Keepr, Fruitful's AI team companion in Slack and Microsoft Teams.

1. Who we are, and our role

Fruitful B.V., Luxemburgstraat 91, 1363 BK Almere, the Netherlands, Chamber of Commerce number 90010485.

  • Processor: for the personal data of our clients' employees in the platform and Keepr, we act on behalf of our client, the employer. Our client is the controller. This is set out in a data processing agreement with each client.

  • Controller: for our own company data, such as contact details of prospects and business contacts, and visitors of our website.

2. Which personal data we process

  • Identification and account data: name, work email address, role and team.

  • Team and development data: team scan answers and results, team reports, team agreements, personal manuals that team members write themselves, and coaching content.

  • Keepr data: the questions you ask Keepr and its answers, and your Slack or Microsoft Teams user id.

  • Usage and technical data: sign-in data, error reports and system logs.

  • Any feedback you give us.

3. Keepr in Slack and Microsoft Teams

Keepr helps a team remember and use its own agreements and insights. We designed it around a few principles:

  • Keepr only sees what you send it. It receives direct messages to Keepr, and messages in a Slack channel that mention Keepr. It does not read other channel conversations.

  • The team owns its memory. Keepr answers from your team's own material in the Fruitful platform. It reports to the team, not about the team.

  • Private conversations stay private. Your conversations with Keepr are not shared with your manager or used for reports.

  • Short retention. Keepr keeps the text of conversations for 7 days, so it can follow a conversation, and then deletes it automatically. Keepr's system logs contain no names, email addresses or message text.

  • No AI training. Keepr's answers are written by an AI model (Claude, by Anthropic), which we use through Amazon Bedrock in AWS's EU regions. Your questions and Keepr's answers are not stored by Amazon Bedrock, not used to train AI models, and not shared with the model provider.

  • Recognising you. Keepr identifies you by the work email address in your Slack or Teams profile, and only gives you your own team's material.

4. Purposes of processing

  • Delivering and maintaining the platform and Keepr.

  • Supporting your team's development: scans, reports, agreements and coaching.

  • Providing reports to the client, at team level.

  • Security and monitoring of our systems.

  • Improving our product, using anonymised data only.

5. Legal basis

  • Performance of the contract with our client.

  • Our legitimate interest, for example in securing our systems.

  • Compliance with legal obligations.

  • Your consent, where required.

6. Employees' personal data

  • We process this data only on the instructions of the employer, our client.

  • We do not use it for HR decisions, and Keepr makes no decisions about people.

  • Insights are shared at team level wherever possible. Personal results stay with the person.

7. Data minimisation and privacy by design

We process only the data we need, and build privacy into the product by default. For example, Keepr does not read channels and keeps conversation text for 7 days only.

8. Retention periods

  • Keepr conversation text: 7 days, then deleted automatically.

  • Account data: for as long as the account is active, and deleted within 30 days after the end of the contract, unless the client asks for its data back first.

  • Usage and log data: up to 30 days, unless needed longer for security.

  • Backups: overwritten within 14 days.

9. Sub-processors

We use carefully selected service providers, with a data processing agreement in place with each:

  • Google Cloud: hosting of the platform, in the Netherlands.

  • Supabase: Keepr's backend and database, in Ireland.

  • Amazon Web Services: the AI model behind Keepr, through Amazon Bedrock in the EU.

  • Lettermint: sending invitations and account emails, from the Netherlands. Email data stays in the Netherlands and Germany.

  • Sentry: error monitoring of the platform, in its EU region in Frankfurt.

  • ElevenLabs: voice for Fruitful's optional coaching features in the platform, only when a client uses them. Processed in the United States, and only switched on with the client's explicit approval.

  • Microsoft: delivery of messages when Keepr is used in Microsoft Teams. The processing location is agreed with the client before first use.

The full list, with legal entities and locations, is part of the data processing agreement and is available on request.

10. Transfers outside the EEA

We store and process personal data in the EEA. The one exception is ElevenLabs, which processes data in the United States, and only when a client has switched on Fruitful's optional coaching features. Some of our service providers are companies based in, or owned by companies in, the United States. Where access from outside the EEA cannot be excluded, we rely on an appropriate safeguard, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

11. Security

  • Encrypted connections (HTTPS) for all traffic, and encrypted storage at our infrastructure providers.

  • Strict, role-based access control, and multi-factor authentication for our staff.

  • Logging and monitoring of our systems, without personal data in Keepr's logs.

  • Daily backups.

12. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to processing, and to data portability. Because we usually process your data on behalf of your employer, you can direct requests to your employer or to us at privacy@meetfruitful.com. We forward them to your employer where needed. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

13. Data breaches

If a data breach affects client data, we inform our client within 24 hours of discovering it, so the client can notify the supervisory authority within 72 hours where required. For data we control ourselves, we notify the authority within 72 hours where required.

14. Artificial intelligence and profiling

  • No automated decisions with legal or similarly significant effects are made about anyone.

  • AI output, including Keepr's answers, is advisory only.

  • We do not use profiling outside the purposes in this policy.

15. Changes

We update this policy when our services change. The current version is always on our website.

16. Contact

For privacy questions: privacy@meetfruitful.com

Fruitful B.V., Luxemburgstraat 91, 1363 BK Almere, the Netherlands. Chamber of Commerce: 90010485