Privacy policy
1. Who we are
- JEVA Techniek (trade name of Jeva techniek, sole proprietorship)
- Wittem 3, 7603 NE Almelo, the Netherlands
- Chamber of Commerce (KvK) number: 99865351
- E-mail: info@jevatechniek.com · Phone/WhatsApp: +31 6 23235300
We are responsible for the processing of personal data as described in this policy.
2. In short
- Jeva Server is a pass-through. The connection between your device and your own Home Assistant server at home runs through our server, but it is encrypted all the way to your home. We cannot see the content and we do not store it.
- We do not store camera images, recordings, passwords or device data. Everything stays on your own server at home.
- We never sell your data and we do not build advertising profiles.
- We only keep what is needed for your subscription, invoicing and the proof of your consent.
3. Which data we process
a) Visiting the website
- Technical data every website receives, such as IP address, browser type, time and the page requested. These are in the technical log files of our server. They are overwritten automatically once they are full (at most 30 MB per part of our server); there is no fixed period in days.
- Settings on your own device (such as language, theme, shopping cart and your Jeva Server link). These stay on your device.
- If you arrive through a link someone shared with you, we only count that: the kind of link and, if any, the product, without knowing who you are.
- If you click a link to a partner shop (such as bol or Amazon), the privacy rules of that shop apply from that moment.
b) Jeva AI (chat on the website and via WhatsApp)
- Your messages are processed by an artificial intelligence service provider to give you an answer.
- We keep your conversation (messages and attachments), so you can continue later and a staff member can read along and help. A conversation is deleted automatically 6 months after the last message; at your request we delete it sooner. Your last IP address with the conversation is deleted automatically after 30 days.
- We may use general questions and answers, without personal data, to improve the service. Greetings, names, phone numbers and e-mail addresses are left out automatically.
- Please do not share sensitive data in the chat, such as passwords or bank details.
c) Contact via WhatsApp, e-mail or phone
- What you send us yourself (for example photos, messages or a maintenance report) we use to help you.
- We keep it as long as needed for the job and the warranty, and no longer than necessary after that.
- We never use photos of your home for advertising without your permission.
d) Jeva Server subscription
- Subscription and licence (which plan, status, the link with your server).
- A hash (fingerprint) of your Home Assistant server's unique number, so the licence only works on your server, and a hash of a random number for each device that activated the code (to limit the number of devices). Not the number itself, no device data.
- Proof of your consent: date, time and version of the agreement you accepted.
- A technical code to send notifications to your device (only if you switch notifications on).
- Invoicing data: name, address, e-mail, phone and payment details. We keep these separately from the service and as long as the law requires (7 years).
e) Remote maintenance
- Only if you yourself switch on «allow remote maintenance», and only while it is on (at most 24 hours, after that it switches off by itself).
- During a check, data from your server is read live to make a report. The report goes to you only. We do not keep it.
- Your own server records when maintenance was switched on and off, as proof of your consent.
- If you send the report to us yourself (for example via WhatsApp), point c applies.
4. What we do not do
- View or store camera images or recordings.
- Keep passwords of your devices or server.
- Sell or share data for advertising.
- Access your server unless you switch maintenance on yourself.
5. Why we may process data
- Performance of the agreement: your subscription, the pass-through via Jeva Server and maintenance you request.
- Legal obligation: invoices and accounting (7 years).
- Legitimate interest: securing our systems and improving the website.
- Consent: notifications and remote maintenance. You can always withdraw your consent.
6. Who we share data with
We work with service providers who process data only for us:
- Hosting of our server (within the EU, Germany).
- Hosting and security of the website.
- An artificial intelligence service provider (Jeva AI and maintenance checks).
- WhatsApp, if you contact us via WhatsApp.
- An e-mail service, for requests from the chat that we receive by e-mail.
Some service providers may process data outside the EU. In that case this only happens with the safeguards the law requires (such as the standard contractual clauses of the European Commission).
7. Retention periods
| Data | How long |
|---|---|
| Technical log files | Overwritten automatically once full (at most 30 MB per part) |
| Last IP address with a conversation | 30 days |
| Jeva AI conversations | 6 months after the last message (automatic), or sooner at your request |
| Contact (WhatsApp, e-mail) | As long as needed for the job and warranty |
| Subscription and licence | As long as the subscription runs, then as long as needed for the accounting |
| Proof of consent | As long as the subscription runs, then as long as a dispute about it can arise |
| Invoicing data | 7 years (legal obligation) |
| Maintenance report | Not kept by us |
8. Security
We take appropriate measures: encrypted connections, access only for those who need it and no storage of what we do not need.
9. Your rights
You have the right to access your data, have it corrected or deleted, restrict the processing, object and take your data with you. Send your request to info@jevatechniek.com; we reply within one month.
Not satisfied? You can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
10. Changes
We may change this policy. The date at the top shows when that last happened.
This privacy policy has been drawn up with care on the basis of the applicable laws and regulations (GDPR). An additional legal review is planned.