Privacy Policy

Last updated: March 1, 2026

1. Who we are

DelayPay ("we", "us", "our") is a transit refund recovery service operated in the Netherlands. We act as your authorized representative to file compensation claims with transit operators on your behalf.

2. Data we collect

We collect only the data necessary to process your refund claims:

Email address — to create your account and communicate claim updates.
Name (optional) — to personalize your account.
IBAN / bank details — to send you your refund payout.
Ticket / booking information — trip date, route, delay details, and ticket images to verify eligibility and submit claims.

3. How we use your data

To verify your delay against public transit schedule data.
To submit refund claims to transit operators on your behalf.
To process payouts to your bank account.
To send you email updates about your claim status.

We never sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-party sharing

We share your data only with:

Transit operators (e.g., NS, Eurostar, Deutsche Bahn) — solely to process your refund claim.
Payment processors — to facilitate payouts to your bank account.
Infrastructure providers (Convex, Cloudflare) — for secure data storage and delivery.

5. Data storage & security

Your data is stored on encrypted servers within the EU. We use industry-standard encryption (TLS in transit, AES-256 at rest) to protect your information. Access is restricted to authorized personnel only.

6. Data retention

We retain your data for as long as your account is active or as needed to provide our services. You may request deletion of your data at any time by contacting us at privacy@delaypay.eu.

7. Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate data.
Request erasure ("right to be forgotten").
Restrict or object to processing.
Data portability — receive your data in a structured format.
Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Cookies

We use only essential cookies (theme preference stored in localStorage). We do not use tracking cookies or third-party analytics.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website.

10. Contact

For privacy-related inquiries, contact us at: privacy@delaypay.eu