Privacy policy

1. Introduction

Talistech BV, with registered office at Oudenaardsesteenweg 368, 9420 Erpe-Mere (Belgium) and company number BE1009245408, is the controller of your personal data. Plantool is a tool of Talistech BV.

This privacy policy explains which personal data we collect, how we use it, and which rights you have under the General Data Protection Regulation (GDPR).

2. Data we process

When you use Plantool, we may process the following personal data:

• Account data: name and email address at registration.
• Booking data: your name, email address, phone number when provided, selected date and time, service type, and answers to booking forms.
• Usage data: technical data such as IP address, browser type and visit date/time for security and debugging purposes.
• Google Calendar data: data required when you connect your Google Calendar.

3. Google Calendar integration

Plantool can connect your Google Calendar for automatic synchronization of available time slots. The following safeguards apply:

• Limited access: we only request access to the Google Calendar API scope calendar.events. We do not access emails, contacts, Drive files or other Google services.
• Encrypted storage: Google OAuth tokens are stored encrypted in our database.
• Calendar data only: we only read and update events in the Google Calendar you connect.
• No sharing with third parties: Google calendar data is not sold or passed to other parties.
• Control: you can disconnect the integration at any time in the agenda settings in Plantool.

4. Mollie B.V. payment processing

Plantool uses Mollie B.V., based in Amsterdam, the Netherlands, for payments.

• No payment data storage: credit card numbers, bank account numbers and other payment data are processed by Mollie and are not stored on Plantool servers.
• Processor agreement: a processor agreement has been concluded with Mollie in line with GDPR requirements.
• Billing data: for billing purposes, we keep your name, email address, customer type, VAT number and transaction history for the legally required period of 7 years.

5. Retention period

We keep personal data while your account is active. When an account is deleted, it is first deactivated and data is permanently removed within 30 days, except data that must legally be kept longer, such as billing data.

6. Security

Talistech BV takes appropriate technical and organizational measures to protect personal data:

• All communication uses HTTPS (TLS encryption).
• Passwords are stored as hashes.
• OAuth tokens and SMTP credentials are stored encrypted.
• Servers are monitored for unauthorized access.
• Two-factor authentication (2FA) is available for additional account security.

7. Sharing with third parties

We only share personal data when required for the service or when legally required.

• Google LLC: only when you voluntarily connect your Google Calendar.
• Mollie B.V.: for payment transaction processing.
• Processors: hosting and email delivery according to our instructions.
• Legal obligation: when we are legally required to share data.

We never sell your personal data to third parties.

8. Cookies

Plantool uses functional cookies that are necessary for the website to work, such as session cookies, CSRF tokens and language preferences.

For analytics, we may place Google Analytics cookies and a first-party Plantool visitor cookie. Plantool may also store pageviews, important clicks, IP address, user-agent, browser/device and country data for internal SaaS analytics. Analytics cookies are enabled by default, but you can disable public analytics at any time through the cookie banner. Read our cookie policy for the full overview.

9. Your rights

Under the GDPR, you have rights regarding your personal data:

• Right of access: you can ask which data we process.
• Right to rectification: you can have incorrect data corrected.
• Right to erasure: you can request deletion of data.
• Right to restriction: you can temporarily restrict processing.
• Right to portability: you can request data in a common format.
• Right to object: you can object to processing.

To exercise a right, email support@plantool.app. We respond within 30 days.

10. Contact

For questions about this privacy policy or the processing of your personal data, contact: