Our Privacy Policy

Last Updated: 19 July 2025 

1. Introduction 

Welcome to Devnation. As a Belgian software and service company, we are dedicated to protecting the privacy and security of our users' data. This Privacy Policy outlines how SRL Devnation ("we," "us," or "our") collects, uses, processes, and safeguards your information when you use our "Devnation Calendar and Business Application" and any of our related software services (collectively, the "Services"). 

Our Services are designed to empower small and medium businesses in Belgium by providing robust tools for appointment and business management, including deep integrations with third-party services like Google (Calendar and Gmail) and Microsoft (Outlook Calendar and Mail). 

By using our Services, you consent to the data practices described in this policy. 

2. Information We Collect 

We collect information that is necessary to provide, maintain, and improve our Services. The specific types of data we gather depend on your interaction with our Services. 

2.1. Information You Provide Directly 

• Account and Business Information: When you register for an account, we collect essential details such as your name, business name, email address, phone number, physical business address, and payment/billing information. 

• Customer Data You Manage: While using our business management tools, you will input information about your own clients (e.g., names, contact details, appointment notes). In the context of this data, you are the "Data Controller," and Devnation acts as the "Data Processor" on your behalf. 

2.2. Information from Integrated Third-Party Services 

To provide a seamless experience, our Services require you to connect your Google and/or Microsoft accounts. By authorizing these connections, you grant us permission to access specific data from these platforms. 

a) Google Integration (Google Calendar & Gmail): 

• Google Calendar Data: We request access to read, create, edit, and delete events on your Google Calendar. This is fundamental for our application to schedule, manage, and sync appointments directly with your calendar. We will only access calendars you explicitly choose to sync. 

• Gmail Data: We request permission to view, read, and send emails from your connected Gmail account. This functionality allows you to manage client communications directly within the Devnation application interface, streamlining your workflow. We do not store your emails on our servers. Our application displays email content temporarily for viewing and uses Google's API to send your replies. 

b) Microsoft Integration (Outlook Calendar & Outlook Mail): 

• Outlook Calendar Data: We request access to read, create, edit, and delete events on your Outlook Calendar to provide the same appointment scheduling and management capabilities as the Google Calendar integration. 

• Outlook Mail Data: We request permission to view, read, and send emails from your connected Outlook Mail account. Similar to the Gmail integration, this allows for in-app communication management without storing the body of your emails on our servers. 

Our use and transfer of information received from Google APIs to any other app will strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data obtained from Google or Microsoft for advertising purposes. 

2.3. Information We Collect Automatically 

• Usage and Technical Data: We automatically collect information about your interaction with our Services, such as IP addresses, browser types, device information, features utilized, and pages visited. 

• Cookies and Similar Technologies: We use cookies to operate our Services, authenticate users, gather usage data, and enhance your user experience. You can manage your cookie preferences through your browser settings. 

3. How We Use Your Information 

Our primary goal is to provide a secure, efficient, and customized business management experience. We use your data to: 

• Provide and Manage the Services: To create and maintain your account, process payments, and deliver the core functionalities of appointment scheduling, business management, and integrated communication. 

• Enable Third-Party Integrations: To seamlessly sync your calendars and emails, which is a core feature of the Devnation application. 

• Communicate with You: To send important service-related notifications, security alerts, invoices, and technical updates. We may also send marketing communications, which you can opt-out of at any time. 

• Provide Customer Support: To investigate and resolve any issues or inquiries you submit. 

• Improve and Develop Our Services: To analyze usage patterns and user feedback, which helps us enhance our product and create new features. 

• Ensure Security and Legal Compliance: To prevent fraudulent activity, enforce our Terms of Use, and comply with our legal obligations under Belgian and EU law. 

4. Legal Basis for Processing (Under GDPR) 

We process your personal data based on the following legal grounds as defined by the GDPR: 

• Performance of a Contract: To fulfill our contractual obligations to you by providing the Services you have subscribed to. 

• Legitimate Interests: For our legitimate business interests, such as improving and securing our Services, provided these interests are not overridden by your data protection rights. 

• Consent: For specific actions, such as connecting your Google or Microsoft accounts or subscribing to marketing emails, we rely on your explicit consent, which you can withdraw at any time. 

• Legal Obligation: To comply with applicable laws and regulations in Belgium and the European Union. 

5. Data Sharing and Disclosure 

We are not in the business of selling your personal data. We share it only under the following, limited circumstances: 

• Third-Party Service Providers: We engage trusted third-party companies to perform services on our behalf (e.g., payment processing with Stripe, cloud hosting with AWS). These vendors are contractually bound to protect your data and are permitted to use it only for the specific services they provide to us. 

• Legal Requirements: We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the safety of our users, protect our rights, or investigate fraud. 

• Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the transaction. We will notify you of any such change in control or use of your personal data. 

6. Data Retention 

We retain your personal data for as long as you maintain an active account with us. After you close your account, we may retain certain information for a commercially reasonable period to comply with legal obligations (e.g., for tax and accounting records), resolve disputes, and enforce our agreements. You may request the deletion of your data at any time, subject to these legal retention requirements. 

7. Your Data Protection Rights under GDPR 

As a user based in Belgium, you are afforded the following rights concerning your personal data: 

• The Right to Access: You can request copies of your personal data. 

• The Right to Rectification: You can request that we correct any inaccurate information or complete any incomplete information. 

• The Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data, under certain conditions. 

• The Right to Restrict Processing: You can ask us to restrict the processing of your data, under certain conditions. 

• The Right to Data Portability: You can request that we transfer the data we have collected to another organization, or directly to you. 

• The Right to Object: You have the right to object to our processing of your personal data when it is based on legitimate interests. 

• The Right to Withdraw Consent: For any data processing based on your consent, you can withdraw that consent at any time. You can revoke access to your Google or Microsoft account via their respective account security settings pages. 

To exercise any of these rights, please contact our Data Protection Officer at [e.g., info@devnation.be]. 

8. Data Security 

We implement robust technical and organizational measures designed to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include data encryption in transit and at rest, strict access controls, and regular security audits. 

9. International Data Transfers 

We do not transfer any data outside the EU. While our services are targeted at the Belgian market, we may use service providers (e.g., for cloud hosting) located within the European Economic Area (EEA). All data remains within the EEA, ensuring it is protected by safeguards approved by the European Commission, such as Standard Contractual Clauses (SCCs), when processed by these providers. 

10. Changes to This Privacy Policy 

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on our website and, where feasible, via email. 

11. Contact Us 

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: 

SLR Devnation  

Chaussée de Wavre 533, 
Wavre 1390 

Belgium  

Email for Privacy Inquiries: info@devnation.be 

Website: www.devnation.be