Gevox

1. Service Publisher

Gevoxx is a Customer Relationship Management (CRM) software published and operated by its owners. For any question relating to these terms, please contact your organisation's administrator via the application.

2. Personal Data Collected

When creating your account, the following data is collected:

• First and last name
• Email address (login identifier)
• Phone number (optional)
• Password (stored as a hash, unreadable)

In the context of using the application, data relating to your activities is also recorded (projects, contacts, comments, action history).

3. Purpose of Processing

Your data is processed exclusively for:

• Managing your user account and authentication
• Operating the application's features (project management, contacts, etc.)
• Sending transactional communications related to your account (verification, security)

4. Legal Basis for Processing

In accordance with the General Data Protection Regulation (GDPR xx Regulation EU 2016/679), the processing of your data is based on your explicit consent, collected when creating your account.

5. Data Recipients

Your personal data is accessible to authorised members of your organisation within the application. It is not sold, rented or transferred to third parties for commercial purposes.

Technical sub-contractors (hosting, infrastructure) may access the data strictly within the scope of their work, and are bound by confidentiality obligations in accordance with the GDPR.

6. Retention Period

• Unverified accounts: automatically deleted after 3 days without validation
• Active accounts: retained for the duration of service use
• After account deletion: data may be retained in anonymised form for statistical purposes

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right of rectification: correct inaccurate or incomplete data
• Right to erasure (“right to be forgotten”): request deletion of your data
• Right to portability: receive your data in a structured, readable format
• Right to restriction of processing: temporarily restrict the use of your data
• Right to object: object to the processing of your data

To exercise these rights, contact your organisation's administrator via the application.

You also have the right to lodge a complaint with your national data protection authority. In France: www.cnil.fr.

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure (password hashing, JWT token authentication, organisation-restricted access).

9. Cookies and Local Storage

Gevoxx does not use advertising tracking cookies and places no third-party cookies on your browser.

To function, the application only uses the browser's local storage (localStorage) for:

• Storing your authentication token (JWT) between sessions
• Remembering your active organisation when switching organisations
• Temporarily storing your profile information (name, email, permissions) to avoid unnecessary network calls

This data is stored locally on your device, is not shared with third parties, and can be deleted at any time by logging out or clearing site data in your browser.

In accordance with Article 5(3) of the ePrivacy Directive (2002/58/EC), these storage elements are strictly necessary for the service to function and do not require prior consent.

10. Google Integration

Gevoxx offers an optional integration with Google services. If you choose to link your Google account from your profile, Gevoxx accesses certain data via the Google API exclusively for the following purposes:

• Calendar synchronisation: reading and creating events in your Google Calendar, so that Gevoxx events are reflected in your personal calendar and vice versa.
• Google Meet link generation: automatically creating a Google Meet link when scheduling a virtual meeting in Gevoxx.

Data from your Google account is not used for any other purpose, not shared, and not sold. Gevoxx does not store the contents of your calendar ; only an encrypted OAuth access token is retained to maintain the connection, and solely for as long as you do not revoke access.

You can disconnect your Google account at any time from the Profile page of the application. Revocation is also possible directly from your Google account: myaccount.google.com/permissions.

This integration is governed by Google’s Privacy Policy and the Google API Services User Data Policy, including the Limited Use Requirements.

Google Limited Use Requirements compliance : Gevoxx’s use of data obtained through Google APIs is strictly limited to the purposes disclosed above (calendar synchronisation and Google Meet link generation). This data is never used for advertising, profiling, resale, or transferred to third parties. No data obtained through Google APIs is used to train artificial intelligence models.