ENNL
Free consultation
Home / Privacy
Legal

Privacy & Cookie Policy

How Crux Digits handles your data, cookies and privacy — in plain language.

This Privacy & Cookie Policy explains how Crux Digits B.V. ("Crux Digits", "we", "us") collects, uses and protects personal data when you visit cruxdigits.nl, and how SimplyBoost, the AI chat product we build and operate, uses data it receives from Google. We are the data controller for the processing described here.

Who we are

Crux Digits B.V. is an AI consultancy and software studio based in Nieuwegein, the Netherlands, and the company behind SimplyBoost. For any privacy question or request you can reach us at info@cruxdigits.nl or by post at Vlierhoeve 100, 3438 MW Nieuwegein, the Netherlands.

What data we collect

Information you give us. When you contact us through the website or by email, we receive the details you choose to share — typically your name, email address, company and the content of your message.

Usage data (analytics). With your consent, we collect pseudonymous information about how the site is used — pages viewed, approximate region, device and browser type, and referring source. We do not try to identify you personally from this data.

Cookies and analytics

We keep tracking to a minimum and we do not load analytics cookies until you agree.

  • Google Analytics 4 — used only after you select "Accept" on the cookie banner. It sets cookies (such as _ga and _ga_*) to measure visits and improve the site. Until you accept, Google Consent Mode keeps these in a denied state and no analytics cookies are stored.
  • Vercel Web Analytics — a privacy-friendly, cookieless measurement tool that records aggregated page views without cookies or personal identifiers. Because it stores nothing on your device and cannot identify you, it runs without requiring consent.
  • Your consent choice — we store your accept/decline choice locally in your browser (a localStorage entry named cd-consent). This is not a tracking cookie and is never shared.

You can change or withdraw your consent at any time by clearing this site's data in your browser, which brings the banner back on your next visit. You can also block or delete cookies in your browser settings.

  • Consent (Art. 6(1)(a) GDPR) — for analytics cookies and usage measurement via Google Analytics.
  • Legitimate interest and pre-contractual steps (Art. 6(1)(f) and 6(1)(b) GDPR) — to answer your enquiries, run aggregated cookieless analytics, and keep the site secure.

How we use your data

  • To respond to your messages and provide the information or proposal you ask for.
  • To understand, maintain and improve the website.
  • To protect the site against misuse and to meet legal obligations.

We never sell your personal data, and we do not use it for automated decision-making that produces legal effects.

Service providers and international transfers

We share data only with providers that help us run the site, acting as our processors under appropriate agreements:

  • Vercel — website hosting and cookieless analytics.
  • Google — Google Analytics 4 (only with your consent), and Google sign-in and Google Calendar for SimplyBoost customers.
  • Sanity — content management for our blog and resources.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep data

We keep enquiry correspondence for as long as needed to handle your request and for a reasonable period afterwards for follow-up and our records. Analytics data is retained according to the retention settings configured in Google Analytics and is otherwise held in aggregated form.

SimplyBoost and Google user data

SimplyBoost (simplyboost.io, dashboard at get.simplyboost.io) is an AI chat assistant for businesses, built and operated by Crux Digits B.V. The Google sign-in and Google Calendar connection in SimplyBoost appear under our company name, Crux Digits. This section covers the Google data they use. The full SimplyBoost policy is at get.simplyboost.io/privacy-policy.

Sign in with Google. If you sign in to SimplyBoost with Google, we receive your name, email address and profile picture and use them only to create your account and sign you in. We do not keep a Google access token after sign-in.

Google Calendar. When a SimplyBoost customer connects Google Calendar so their assistant can book meetings, we access:

  • Free/busy times (calendar.freebusy), to offer website visitors open times within the working hours the customer sets. We do not read the titles, descriptions or attendees of events.
  • Events on calendars the customer owns (calendar.events.owned), to create, move or cancel the meetings booked through the assistant. We do not change any other event.
  • The Google email address (userinfo.email), to show which account is connected.

We store the connected email address, Google's access and refresh tokens (encrypted at rest), the working hours, and for each booking the event ID, time, and the visitor's name and email address. This data is kept while the calendar is connected and the account is active.

SimplyBoost's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI or machine-learning models, and no person at Crux Digits reads it unless the customer asks us to, it is needed for security, or the law requires it.

Disconnecting Google Calendar in SimplyBoost revokes our access at Google and deletes the stored tokens. You can also remove access at any time in your Google account.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting processing carried out before withdrawal. To exercise any of these, email info@cruxdigits.nl.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes to this policy

We may update this policy from time to time. The current version always lives on this page, with the "last updated" date below.

Last updated: 15 October 2026