Privacy questions
For privacy questions about purchase, licence or support, use privacy@zoqa.nl.
Your invoices and customers
Your business, customer, invoice and payment data is stored in your own Google Sheets™ spreadsheet. Generated invoice PDFs are stored in your Google Drive™. You manage access and storage to your own data.
Google access for the add-on
The add-on uses the active spreadsheet, files that the app creates or uses in Google Drive™, and the email address of the active Google account for licensing. The app requests no Gmail access and no unrestricted Google Drive™ access.
For protected actions, the add-on reads the active Google account. The normalised email address is hashed in the app with SHA-256. Zoqa stores the hash associated with the active licence in the licence registration. We do not log email addresses or login credentials.
Data Zoqa processes
- Purchase and administration
- Name, contact and business details made available through Stripe or the order, payment status, purchase reference and data needed for our administration.
- Licence
- The Google account you provide for activation and the hashed account identifier used to check the active licence.
- Support
- Your email address, message and technical information you choose to send.
- Privacy requests
- Data needed to verify your identity and handle your request.
Why we use this data
For purchase, activation, licence management and customer support, we process data to perform the contract or take steps at your request before entering into a contract. We retain data that forms part of our tax administration because we have a legal obligation to do so. For general questions that are not yet covered by a contract, our legitimate interest in handling product enquiries may be the legal basis.
Retention periods
- Purchase and administrative data
- 7 years where the data forms part of our tax administration.
- Active licence hash
- For as long as the licence is active. After final termination, we remove the active licence registration within 30 days unless a specific dispute or legal obligation requires longer retention.
- Support
- Up to 2 years after the support request is resolved. Messages that become part of a dispute or administrative file may be kept longer for as long as needed for that purpose.
- Privacy requests
- Up to 2 years after completion so we can demonstrate how the request was handled.
Stripe and Google
Stripe processes checkout and payment data as a payment service provider. Google processes data within Google Sheets™, Google Drive™, Apps Script and your Google account under the terms that apply to those services. These providers may process data outside the EEA. They publish information about the safeguards they use, including adequacy mechanisms and standard contractual clauses where applicable.
Google on international data transfers Stripe data processing
Your rights
You can request access, correction or deletion of personal data. Depending on the processing, you may also request restriction, portability or object. Some data cannot be deleted immediately where a legal retention obligation applies.
Send your request to privacy@zoqa.nl. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Website
General use of tools.zoqa.nl is also covered by the Zoqa Tools privacy notice.
Google Sheets™ and Google Drive™ are trademarks of Google LLC.