Privacy policy and data governance
Benchmarq is engineered by Enso DX in the Netherlands. We adhere to strict European data privacy standards: minimal data collection, no third-party tracking without your consent, deterministic audits that only touch public surfaces, and full compliance with the General Data Protection Regulation (GDPR).
Synopsis
- Data controller
- Enso DX B.V., registered in the Netherlands. Contact: info@benchmarq.io.
- Audit scope
- Benchmarq audits publicly accessible web pages only. We never inspect private repos, intranet servers, or internal databases.
- Scan confidentiality
- Audit results, competitor configurations, and action items remain private to your workspace unless you explicitly share a report.
- Tracking & cookies
- No advertising cookies. Cloudflare Web Analytics runs without cookies; Microsoft Clarity analytics runs only after you accept analytics cookies.
- Payment processing
- Payment transactions are handled securely by Stripe (PCI-DSS Level 1). Benchmarq never stores or handles payment card numbers.
- Data retention
- Account details are retained while active and deleted within 30 days of account closure.
- Supervisory authority
- Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
What data we collect and why
We collect only the minimum information required to authenticate users, execute requested audits, and maintain account state.
Account authentication
When registering with credentials, we store your email address and a securely hashed password. If authenticating via Google Workspace, LinkedIn, or HubSpot OAuth, we receive your verified email and name token.
Domain audits & diagnostic reports
When you submit a URL or domain, our pipeline fetches published markup to execute 200+ rule assertions. Stored report data includes track scores, timestamped check results, and generated action items.
Subscription billing
For paid plans (Standard, Premium), billing metadata and customer identifiers are managed directly by Stripe. We do not store credit card credentials on our servers.
Website analytics (with consent)
If you accept analytics cookies, Microsoft Clarity collects how you use our website: pages viewed, clicks, scrolling, device and browser type, country, and session recordings with form input masked. Microsoft processes this data and may store it outside the European Union.
Legal basis and usage principles
All personal data processing is conducted strictly under applicable European legal frameworks.
Contractual performance (GDPR Art. 6(1)(b))
We process account credentials and domain URLs exclusively to provide the Benchmarq diagnostic service requested by you upon workspace creation.
Consent (GDPR Art. 6(1)(a))
We use Microsoft Clarity only with the consent you give in our cookie banner. You can withdraw it at any time in the cookie settings; this does not affect processing that took place before.
Zero commercial data exploitation
We never sell personal information, license diagnostic findings to data brokers, or add your email address to unsolicited commercial marketing lists.
Zero model harvesting
Your domain audit reports, custom action items, and benchmark rankings are never fed into third-party AI training pipelines.
Your rights under GDPR
As a user in the European Union or European Economic Area, you hold full statutory rights over your personal data.
Access & data portability
Request a machine-readable export of all account records, domain histories, and diagnostic reports associated with your profile.
Rectification & erasure
Update outdated account details or request the permanent deletion ('right to be forgotten') of your account and historical scans.
Objection & complaint escalation
Object to processing or lodge a formal inquiry with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if your privacy concerns are unresolved.
To exercise any of your statutory rights, email our team at info@benchmarq.io. We process all verifiable requests within 30 calendar days.
Have questions about our privacy practices?
Contact our data protection team directly for technical inquiries, data processing agreements, or security reviews.