Privacy policy

Last updated: 26 July 2026

This policy explains what personal data Dropes (Legakte SRL) processes, why, and what your rights are. We comply with the General Data Protection Regulation (GDPR).

1. Data controller

Legakte SRL ("Dropes"), Avenue des Gerfauts 10 box 34, 1170 Watermael-Boitsfort, Belgium — BCE 1022.158.878. Contact: info@dropes.co.

2. Data we process

• Identity and contact data: name, email address, company (when you write to us or start a diagnosis).
• Odoo connection data: instance address, Odoo email and read-only API key, used only while generating your report.
• Management volumes: aggregated figures read from your Odoo (number of invoices, quotes, etc.) to build the diagnosis.
• Payment data: processed directly by Stripe. We store no card number.
• The content of your messages sent via the contact form.

3. Purposes & legal bases

• Perform the diagnosis and show you the result — performance of the service / your consent.
• Send you your report and a follow-up — your consent (checkbox).
• Respond to your contact requests — our legitimate interest in replying to you.
• Process payments and meet our accounting and tax obligations — legal obligation.

4. Your Odoo API key

The API key you provide is read-only. It is used only to read the volumes needed for the diagnosis, is not kept after processing, and remains revocable at any time from your Odoo account. No writing is done in your system.

5. Processors & recipients

We use providers that process certain data on our behalf:

• Brevo (Sendinblue) — sending emails (report, replies).
• Stripe — payment processing.
• Cal.com — appointment booking.
• Vercel — site hosting.

Where data is transferred outside the European Union, it is done on the basis of appropriate safeguards (standard contractual clauses).

6. Retention period

Contact and follow-up data is kept as long as necessary for the relationship, then deleted or anonymized. Accounting documents (invoices) are kept for the applicable legal period. The technical diagnosis data is not kept beyond processing.

7. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time. To exercise it, write to info@dropes.co.

You may also lodge a complaint with the Data Protection Authority (DPA): Rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be.

8. Security

We implement reasonable technical and organizational measures to protect your data against any unauthorized access or use.