What we collect, why we collect it, and what you can do about it. GDPR-aligned, plain language.
Kesmet is built and operated by Anthony De Smet and Luana Keszeg, based in Belgium. Kesmet is the data controller for your account and the queries you submit. Reach us at anthony@kesmet.org for anything in this document.
Account data. Your email address, a hashed password, your subscription plan, your credit balance, and the timestamps that go with them. This is what we need to let you sign in and bill you correctly.
Query data. The surveys you design and the responses the synthetic panel returns. We store this so you can come back to it. Free-tier surveys auto-delete after 7 days; paid-tier surveys persist until you delete them.
Operational data. A session cookie to keep you signed in, and — only if you accept the cookie banner — privacy-friendly analytics (page views, errors, performance, via AWS CloudWatch RUM). No third-party advertising cookies, no tracking pixels. Decline and we load no analytics at all.
We process account data under contract performance (you signed up for the service) and query data under legitimate interest in providing the service you asked for. Analytics run only on your consent — we ask before loading them, and you can decline without losing any functionality.
We use a small set of processors, each bound by their own GDPR-compliant terms:
You can request access, rectification, or erasure of your personal data at any time by emailing anthony@kesmet.org. We respond within 30 days. You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit) if you think we got it wrong.
We do not sell your data. We do not share it with advertisers. We do not train our persona models on your queries. We do not retain card numbers. If any of that changes, we will tell you on this page before it takes effect.
Last updated: May 16, 2026.