Legal
Privacy Policy
How Devia collects, uses and protects personal data.
Last updated: 11 September 2026
1. Controller
The controller of personal data processed via Devia is:
- XINOVA VISION MANAGEMENT CONSULTANCIES - FZCO
- IFZA Business Park, DDP, Dubai Silicon Oasis, P.O. Box 342001, Dubai, United Arab Emirates
- Contact: contact@devia-artisans.fr
2. Data and purposes
- Account: email, credentials, professional profile (trade, company identifiers where provided).
- Business content: clients, quotes, invoices, price catalogue, PDFs and attachments.
- Payment: billing data processed by Stripe (full card numbers are not stored by us).
- Support: contact messages, transactional email, notification preferences.
- Voice: audio processed for transcription; not retained after processing unless stated otherwise.
- Technical: security logs, IP where needed to prevent abuse, essential cookies.
Main legal bases: contract performance, legitimate interests (security, product improvement), legal obligation where applicable, and consent where required (e.g. non-essential cookies or certain marketing).
3. Location and transfers
Application data is hosted via Google Firebase / Google Cloud (region europe-west1). The web app is delivered by Vercel Inc..
Some processors may process data outside your country. Where EU/EEA data protection law requires safeguards for international transfers, appropriate mechanisms (such as Standard Contractual Clauses) are used.
4. Processors
- Google Firebase / Google Cloud - Auth, data storage, files, server functions
- Vercel Inc. - Web application hosting and delivery
- Stripe - Subscription payments
- OpenAI - AI-assisted transcription and document structuring
- Resend - Transactional email
- Meta Platforms - Advertising measurement (only with consent)
5. Retention
Account and business data are kept while the account is active, then deleted or archived within a reasonable period after closure, unless a longer retention is legally required. Security logs are kept only as long as needed for abuse detection.
6. Your rights
Depending on applicable law (including the GDPR for individuals in the EEA/UK where it applies), you may have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent.
Contact contact@devia-artisans.fr. You may also lodge a complaint with the supervisory authority competent for your place of residence or work.
7. Cookies
Essential cookies are used to operate the service. Analytics and advertising cookies are used only with your prior consent where required. See the Cookies Policy and the on-site consent banner.
8. Security
Appropriate technical and organisational measures are applied (authentication, access control, HTTPS). No system is perfectly secure; use a strong password and report suspicious activity.
9. Related documents
These documents set out the contractual and privacy framework for Devia. Questions: contact@devia-artisans.fr.