Privacy Policy

1. Introduction

DigiData B.V. (Chamber of Commerce number: 96280328), located at Stationsweg 72, 9471 GT Zuidlaren (“DigiData”, “we”, “us”), is responsible for the processing of personal data as described in this privacy policy. We respect and treat your privacy personal data with the utmost care, in accordance with the General Regulation Data protection (GDPR).

2. What data do we collect?

We collect and process the following categories of data:

Account information

• Name and email address (when registering)
• Company name
• Login details (password is stored encrypted)

Integration data

• API keys and tokens for associated applications (stored encrypted)
• Sync settings and progress

Synchronized business data

• Data imported from your connected applications (e.g. customer data, invoices, projects, employee information)
• This data is and remains fully the property of you as a customer

Technical data

• IP address and browser information (for security and debugging)
• Synchronization activity logs

3. How do we collect data?

• Directly from you: when you create an account, log in or change settings.
• Via linked applications: When you set up an integration, DigiData automatically retrieves data via the API of the relevant application. This is done solely based on your configuration and with your permission.
• Automatic: technical data such as IP address is automatically collected when using our service.

4. What do we use your data for?

We only use your data for the following purposes:

• Services: synchronizing data from your linked applications and making it available to you.
• Account management: creating and managing your account.
• Security: protecting your account and our infrastructure.
• Communication: answering your questions or requests.

We do not use your synchronized company data for anything else. We do not have access to the content of your data and do not use it for analysis, marketing or any other purpose. Your data is and remains yours.

5. Basis for processing

We process personal data on the basis of the following legal grounds (Article 6 GDPR):

• Execution of an agreement: providing our service to you.
• Consent: When you set up an integration, you give permission for data to be retrieved from the relevant application.
• Legitimate interest: security of our service and infrastructure.

6. Retention periods

• Account details: are kept as long as you have an active account. After cancellation, your data will be deleted within 30 days.
• Synced data: is kept as long as the relevant integration is active. When deleting an integration, the associated data is immediately deleted.
• Log files: are kept for a maximum of 90 days.
• API keys and tokens: are immediately deleted when you unlink an integration.

7. Your Rights

Under the GDPR you have the following rights:

• Right of access: you can request which data we process about you.
• Right to rectification: you can have incorrect data corrected.
• Right to deletion: you can request the deletion of your data.
• Right to restriction: you can have the processing of your data restricted.
• Right to data portability: you can receive your data in a structured format.
• Right to object: you can object to the processing of your data.
• Right to withdraw consent: you can withdraw previously given consent at any time.

8. Withdraw consent and delete data

You can withdraw your consent and/or request deletion of submit personal data:

• In the app itself: You can disconnect your integrations and delete your data at any time via your DigiData account.
• By email: send a request to info@digi-data.nl and we will process your request as quickly as possible, at the latest within 30 days.

Once deleted, all your synced data, account information and saved credentials will be deleted permanently deleted. This cannot be undone.

9. Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss or misuse. Your data is therefore protected at all times. This includes:

• Encryption of API keys and passwords
• Two-factor authentication (2FA) for account access, so only you can access your data
• IP whitelisting: you can set that only certain IP addresses have access to your account and data
• Separate storage per customer (multi-tenant isolation)
• Access restriction to production systems
• Regular security updates

10. Sharing with third parties

We do not share your data with third parties unless this is necessary for the delivery of our service (for example hosting providers) whether we are legally obliged to do so. With processors who have access to your data, we conclude a processing agreement.

Remote AI assistant via MCP

When a DigiData administrator consciously uses an external assistant such as ChatGPT or Claude via MCP DigiData only displays the sources, tables and columns selected for that connection by. Use DigiData and the Azure foundation model service configured for DigiData customer questions and company data not to train models. All user and application data that DigiData itself stores data within the EU.

The transfer via MCP is a customer authorized output. The chosen external assistant can then process or store its own copy under the contract, subscription, settings and retention periods of that provider. The DigiData guarantee for EU storage does not apply to those separate copy from the external provider. Therefore, please check it before pairing workspace policy and the privacy terms of the chosen assistant.

11. Cookies

Our website uses functional cookies that are necessary for its functioning of the service (such as session cookies for logging in). We do not post tracking or marketing cookies without your explicit consent.

12. Submit a complaint

Do you have a complaint about the processing of your personal data? Please contact us via info@digi-data.nl. You also have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

13. Changes

We reserve the right to change this privacy policy. Changes will be posted published this page. In case of substantial changes we will inform you by e-mail.

14. Contact

If you have any questions about this privacy policy or the processing of your personal data, please contact us: