rumo

Privacy Policy

Last updated: March 2026

Archevia BV (“Archevia”, “we”, “us”) operates the Rumo helpdesk platform. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Data controller

Archevia BV
Belgium
privacy@archevia.be

2. Personal data we collect

Account dataName, email address, hashed password, role, account creation date.
Support ticketsTicket subject, description, status, priority, comments, and any custom fields you fill in when submitting a ticket.
Usage dataIn-app notifications, satisfaction ratings, timestamps of ticket activity.
Technical dataSession tokens stored in cookies. Theme preference and cookie consent choice stored in browser localStorage. We do not use analytics or tracking cookies.

3. Lawful basis for processing

Contract performanceProcessing your account data and support tickets is necessary to provide the helpdesk service you or your organisation has engaged us to provide (GDPR Art. 6(1)(b)).
Legitimate interestsService notifications (e.g. ticket reply emails) and security (e.g. CSRF protection) are necessary for the proper functioning of the platform (GDPR Art. 6(1)(f)).

4. How we use your data

  • Authenticate you and keep your session active.
  • Create and manage support tickets on your behalf.
  • Send email notifications about ticket updates and assignments.
  • Display in-app notifications to agents and admins.
  • Generate anonymised performance reports for workspace admins.

5. Data retention

We retain your personal data for as long as your account is active and for a reasonable period afterwards in case of disputes. When you delete your account, your name, email address, and password are permanently removed. Ticket content may be retained in anonymised form to preserve support history.

6. Third-party processors

ResendWe use Resend (resend.com) to deliver transactional emails (ticket notifications, password reset links). Your email address is transmitted to Resend solely for this purpose. Resend operates under a Data Processing Agreement with Archevia.

We do not sell or share your personal data with any other third parties.

7. Your rights under GDPR

Right of accessYou can request a copy of the personal data we hold about you.
Right to rectificationYou can ask us to correct inaccurate or incomplete data.
Right to erasureYou can delete your account at any time from your account menu. This permanently removes your personal details.
Right to restrictionYou can ask us to temporarily stop processing your data while a dispute is resolved.
Right to portabilityYou can request your personal data in a structured, machine-readable format.
Right to objectYou can object to processing based on legitimate interests.

To exercise any right other than account deletion, contact us at privacy@archevia.be. We will respond within 30 days.

8. Supervisory authority

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit — gegevensbeschermingsautoriteit.be).

9. Changes to this policy

We may update this policy when we change how we process personal data. The date at the top reflects the most recent revision. For significant changes we will notify you by email.

Cookie policyprivacy@archevia.be