PRIVACY POLICY

Privacy Policy

Geode-Concept SRL — Last updated: October 2026

Geode-Concept SRL attaches great importance to the protection of your personal data. This policy explains what data we collect, why, how we use it, with whom we share it, how long we keep it, and what your rights are.

It applies to all processing of personal data carried out via our website www.vwx-plants.com (hereinafter the "Site"), as well as in the context of our business relationships (B2B and B2C customers).

01Who is the data controller?

Data controller: Geode-Concept SRL
Registered office: Rue de la Chapelle, 47 – B-6990 Hotton
Company number (BCE): BE 0838 443 056
VAT number: BE 0838 443 056
GDPR contact e-mail: support@vwx-plants.com

02What personal data do we collect?

We collect only the data necessary for the purposes described below. Depending on the case, we process:

Data collected automatically

Data you provide to us directly

Purchase and trial data

03Why do we collect this data? (purposes and legal basis)

PurposeLegal basis (GDPR)Main retention period
Customer account managementPerformance of a contract (Art. 6.1.b)Duration of the contractual relationship + 5 years
Order processing and trackingPerformance of a contract (Art. 6.1.b)10 years (accounting limitation period – Art. 2262bis Civil Code)
Invoicing and accountingLegal obligation (Art. 6.1.c)7 years (Belgian accounting law)
Sending of the download linkPerformance of a contract (Art. 6.1.b)24 to 48 hours per generated link; can be regenerated without limit for the entire duration of the license
Management of the free trial version (anti-abuse, one trial per e-mail)Legitimate interest (Art. 6.1.f)Trial duration + 12 months
Management of after-sales service / supportLegitimate interest (Art. 6.1.f)3 years after the last interaction
Fraud prevention and site securityLegitimate interest (Art. 6.1.f)13 months maximum (analytics cookies)
Site usage statisticsLegitimate interest (Art. 6.1.f)13 to 25 months depending on the cookie
Sending of commercial information (news, promotions)Consent (Art. 6.1.a)Until consent is withdrawn

04Cookies and trackers

We use cookies and other trackers. You will find all the details in our Cookie Policy (link to be inserted on the site).

Strictly necessary cookies are exempt from consent. All others (statistics, marketing, social media, etc.) are subject to your prior consent via our cookie banner.

05With whom do we share your data?

We never sell your personal data.

Possible recipients:

Third-party artificial intelligence services chosen by the Customer. The software plugins work with the Customer's personal access key to an AI service of their choice (Anthropic Claude, Google Gemini, xAI Grok, OpenAI GPT). In this case, the data transmitted (prompts, images, results) flows directly between the Customer's computer and the chosen third-party service, using the Customer's own key. Geode-Concept SRL has no access to this traffic or its content, and is not a party to the contractual relationship between the Customer and that provider.

06Transfers outside the European Union

⚠ Section to be reworked before publication. Unlike the previous version, which stated that no transfers outside the EU took place, this is no longer true with the new model: Lemon Squeezy is based in the United States (Boulder, Colorado), and the third-party AI services that the Customer may choose (Anthropic, Google, OpenAI, xAI) are also mostly based there. The text below is a first draft to be validated.

Some data may be processed outside the European Economic Area (EEA):

For any transfer falling under our responsibility as data controller, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decision, or equivalent), in accordance with Articles 44 et seq. of the GDPR.

07Retention period

Retention periods are set out in the table in section 3. At the end of these periods, the data is either deleted or irreversibly anonymized.

08Your GDPR rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

Competent supervisory authority in Belgium: Data Protection Authority (DPA), Rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be — contact@apd-gba.be

09How to exercise your rights?

You can exercise your rights by contacting us:

We will respond within one month (extendable by two months in case of complexity). We may ask you for proof of identity.

10Data security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk (encrypted connections, restricted access, backups, regular updates, etc.).

11Changes to the policy

We may need to amend this policy. The applicable version is the one published on the Site at the time of data collection or of the order.