Privacy Statement

1. Who we are

Nova Generation B.V., trading as Doublecheck, located at Praagsingel 22, The Hague, the Netherlands and registered with the Dutch Chamber of Commerce under number 83857753, is the controller for the processing described in this statement. You can reach us at info@doublecheck.live.

2. Controller and processor

For your account, billing and support we decide what data we process and why: there we are the controller, and this statement applies.

When our customers use Doublecheck to monitor their own systems, such as a Microsoft 365 tenant, we process data on their behalf: there we are a processor. Our Data Processing Agreement applies to that processing. If you are a user in such a tenant, please contact the organisation that manages it with questions about your data.

3. This website

• doublecheck.live places no cookies, uses no analytics or tracking, and loads no fonts, scripts or other content from third parties.
• Like any web server, our servers record technical data of each request: IP address, date and time, the page requested and the browser used. We use this only to secure the website and to solve problems, on the basis of our legitimate interest. Access logs are deleted automatically after at most five weeks; error logs, which can also contain an IP address, after at most eleven weeks.
• If you email us, we use your name, email address and message to answer you.

4. The Doublecheck service: what we process and why

We do not sell personal data, do not use it for advertising, and do not use automated decision-making that has legal or similarly significant effects on you.

5. Cookies in the service

The Doublecheck application at app.doublecheck.live uses only functional cookies that are needed to sign in and to keep the session secure. It uses no tracking or advertising cookies.

6. Who receives personal data

We use the following service providers (sub-processors). They process personal data only on our instructions and under a data processing agreement.

We may also share personal data when the law requires us to.

7. Transfers outside the European Economic Area

Some providers, or their parent companies, are located in the United States. Where personal data is transferred outside the EEA, this happens under the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses of the European Commission, together with additional measures where needed.

8. How long we keep personal data

• Account data and monitoring data: for as long as your account exists. When you end your account, we delete your account data, configuration and monitoring results.
• Monitoring history: while the account exists, older results are removed automatically. For example, hourly availability figures after 45 days, resolved alerts after 30 days and sent notifications after 7 days.
• Financial records, such as invoices and payment data: seven years, because Dutch tax law requires us to keep them (article 52 of the General Tax Act, Algemene wet inzake rijksbelastingen). This also applies after your account has ended.
• Emails to us: for as long as needed to handle your question, and no longer than the account relationship requires.

9. Security

We protect personal data with appropriate technical and organisational measures, including:

• encrypted connections (TLS) for the website and the application;
• credentials for cloud checks kept in a dedicated, encrypted secrets vault, separate from our database, with access restricted to our own services under strict access policies;
• read-only permissions for cloud checks, so Doublecheck cannot change anything in a customer's tenant;
• hosting in data centres in the European Union.

10. Your rights

You have the right to access your personal data, and to have it corrected, deleted or transferred to you or another party. You can also ask us to restrict the processing, and you can object to processing that is based on our legitimate interest.

Send your request to info@doublecheck.live. We may ask you to confirm your identity, and we respond within one month.

If you are not satisfied with how we handle your personal data, please let us know. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Changes

We may update this statement, for example when the service changes. The latest version is always available on this page, with the date of the last update at the top. We inform customers about material changes by email or in the service.