DM Champ Docs

Where Your Data Is Stored

If your legal or IT team is reviewing DM Champ, or you simply want to know who touches your data, this page covers where it lives, which other companies are involved, how long we keep it, and what we will never do with it.

Everything here is published in full on our website, so you can send a reviewer straight to the source instead of relaying answers.

Who You Are Dealing With

DM Champ is built and run by OneGlimpse B.V., a company registered in the Netherlands (Chamber of Commerce number 78315654). DM Champ is the trading name.

We operate the platform ourselves. It is not a rebrand or a resale of someone else’s software.

Where Your Data Lives

Your messages, contacts, campaigns and appointments are stored on dedicated servers we operate in Germany, inside the EU. Uploaded files, media and backups stay in the EU too.

The honest caveat, and the one worth repeating to a client: generating an AI reply means sending that message text to an AI provider, and some of those are based in the United States. We name every one of them rather than bury it.

Where data does leave the European Economic Area, the transfer runs on the European Commission’s Standard Contractual Clauses, with the UK addendum where that applies. Section 7 of the Privacy Policy sets this out, and a copy of the clauses is available on request.

Full detail, in plain language and written to be forwarded to your own client: dmchamp.com/security.

The Other Companies Involved

Sending a WhatsApp message means a messaging provider carries it. Getting an AI reply means an AI provider generates it. Those companies are called sub-processors, and we publish the complete list, with what each one does and where it is based, at dmchamp.com/subprocessors.

The main ones are Twilio and Meta for messaging, Anthropic and Google for AI, Stripe for payments, and Hetzner for the servers themselves. The published list is the authoritative one and it is longer than that.

On the same page you can subscribe to change notices. We give at least 14 days’ notice before a new sub-processor starts handling your data, which gives you time to object.

How Long We Keep It

The full retention table is Section 8 of the Privacy Policy. The parts people ask about most:

  • Your account data: kept for as long as your account exists
  • Contacts and conversations: kept until you delete the contact. Deleting a contact (one at a time, a whole list, or through the API) removes their conversation history straight away, so you set the retention period that fits your purpose. You can also put this on a timer with automatic deletion of inactive contacts
  • Financial records: seven years, because Dutch tax law requires it
  • Backups: anything deleted from the live systems clears out of backups within 90 days
  • Server and security logs: typically up to 12 months

If you cancel, you have 30 days to export everything before we remove it. See Download Your Data for how to pull a copy at any time, cancelled or not.

What We Never Do With It

We do not train AI models on your data. That is a contractual commitment in our Terms. The AI providers that process conversation content (Anthropic and Google for the assistant, OpenAI for call and voicemail transcription, Voyage AI for the FAQ search index) do so under commercial API terms that state API content is not used to train their models.

We do not sell your data, and we do not share it with anyone outside the published sub-processor list.

If Something Goes Wrong

If there is ever a data breach affecting your data, we will tell you within 24 hours of becoming aware of it, including what happened, what it affects, and what we are doing about it.

That is a contractual obligation in our Data Processing Agreement, not a goodwill promise.

For a Formal Review

Send your reviewer these five links and they will have everything:

One thing worth saying up front, because reviewers always ask: we are not SOC 2 or ISO 27001 certified. Those are audit programmes a team our size has not undertaken, and we would rather tell you than let you assume. The security page says the same thing out loud.

Anything those pages do not answer, email hi@dmchamp.com and we will answer it directly.

Next Steps