Privacy Policy
Last updated: 12 June 2026
Introduction
OpStap is committed to protecting personal data. This privacy policy explains what personal data we collect, the purposes for which it is used, the legal bases on which we process it, and how we ensure secure and careful handling. OpStap is a product of Pascal Services, based in Groningen, the Netherlands.
1. Personal data we process
Account data: first name, username, email address, phone number, date of birth, profile photo.
Profile data: interests, favourite music styles, favourite venues, group size preference, uploaded photos.
Identity verification: verification via our partner Didit. We receive only a confirmation of successful verification and do not store the underlying documents.
App usage: technical data (IP address, device ID, push token), time and frequency of check-ins, match data, trust score, and location data when setting a meeting point.
2. Purposes of processing
- Providing the OpStap application, matching, and group chat
- Identity verification for the safety of users
- Calculating and maintaining the trust score
- Communication via push notifications about matches and updates
- Compliance with legal obligations
- Security and monitoring, including detection of abuse
3. Legal bases
- Performance of a contract: data necessary for providing the app and matching functionality
- Legitimate interest: security, fraud prevention, and trust score
- Consent: identity verification via Didit and use of push notifications
- Legal obligation: disclosure of data to competent authorities
4. Sub-processors
| Processor | Country | Purpose |
|---|---|---|
| Didit | Netherlands | Identity verification |
| Stream | US | Group chat and messaging |
| Mapbox | US | Map and location services |
| Supabase | US | Database, authentication, and storage |
| Resend | US | Transactional emails |
5. Retention periods
| Data type | Retention period |
|---|---|
| Account data | Active account + up to 6 months after deletion |
| Match data and chat messages | Up to 90 days after the match |
| Trust score | For as long as the account is active |
| Verification result (Didit) | For as long as the account is active |
| Log files | Up to 12 months |
| Report data | Up to 12 months after resolution |
6. Your rights
As a data subject, you have the following rights under the GDPR:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure (via account deletion in the app)
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interest
Requests can be sent to info@opstap.app. We will respond within one month.
7. Complaints
Complaints may be submitted to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), P.O. Box 93374, 2509 AJ The Hague — autoriteitpersoonsgegevens.nl
8. Contact
Pascal Services
Hoornsediep 34, 9725 HK Groningen, the Netherlands
Tel: 085 301 6480
Email: info@opstap.app
Website: opstap.app
CoC: 92166474 · VAT: NL004941205B42
Questions? Send an email to info@opstap.app