Loading page…
For professionals
Loading account…
Loading page…
Learn how Costavy limits, protects and handles data by purpose and how you can exercise privacy rights.
Costavy is operated by Creagrid BV, enterprise number 0785.645.956, VAT BE0785645956. Registered office: Antwerpse Steenweg 19, 9080 Lochristi, Belgium.
Creagrid BV is the controller for Costavy. Privacy questions and requests: [email protected]. Effective from 24 September 2026.
You provide project choices, municipality and timing, followed by contact details, site address and optional attachments. Businesses also provide company details, services, operating area and a responsible contact. Account, project and message data support the service you request or steps needed to prepare it.
Necessary technical data, including IP addresses, sessions and authentication and security events, protect access, prevent abuse and investigate incidents. This relies on our legitimate interest in a secure service. Mandatory administration relies on the applicable legal obligation. Optional marketing and unnecessary tracking require consent.
Work, general area and timing are used to find companies. They first receive a preview without your direct contact fields. You authorize sharing separately for each company and field. Withdrawal does not undo earlier lawful processing. Companies may need to retain information lawfully received for their services or legal obligations.
Staff access is limited to the information needed for the request, support or security. We do not sell your contact details as a public address list.
The application and database run at DigitalOcean in Amsterdam. Attachments are privately stored at Amazon Web Services in Frankfurt; AWS SES sends system emails. Cloudflare provides DNS, security and traffic handling. These providers process data to deliver their services.
European storage does not exclude all international access or processing. Provider data-processing terms describe subprocessors and, where applicable, standard contractual clauses for transfers outside the EEA. Ask [email protected] about the applicable safeguards. No OpenAI provider is enabled at launch; Savi sends no conversations to OpenAI.
An anonymous draft can be resumed for two hours after its last save. Expiry prevents resuming it; it does not promise immediate removal of every backup or security record. A confirmed request belongs to your account.
Account, project and message data remain needed while you use the service or your case is being handled. Deletion is then assessed against outstanding requests, disputes, mandatory administration and security needs. Legal retention can apply to invoices and evidence. Ask for deletion or the period applicable to your case; we will explain any exception.
You may request access, correction, deletion, restriction, objection and portability where applicable. You may withdraw consent at any time. Contact [email protected]; we verify identity proportionately and respond within statutory periods.
You may complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be. Matching suggests options; Costavy does not contract with a contractor on your behalf. You choose and can request human help. We cannot process a request without the necessary contact and project information.