Privacy¶
Last updated: 5 November 2026. Publisher and processor: MVdW-Software, Draaiersstraat 33, 9300 Aalst, Belgium (VAT BE 0729.544.225).
You are the controller of your data. MVdW-Software processes it as your processor to run the subscription: Data Bridge reads your Exact Online data and passes it to the keys and AI tools you authorise, on our servers, on your behalf, and only within your organization.
For the technical detail of how the data is handled and protected (including the cache), see Data & Security.
What we store, and why¶
| Data | Where | Why |
|---|---|---|
| API keys | in the app's database, as a SHA-256 hash, the key itself is shown once at creation and is not kept | to authenticate machine calls. A database leak cannot read your keys back |
| The grants of each key and connected app (data type × level × administrations) and the IP allowlist | the app's database, per organization | to decide what each call may do |
| MCP OAuth authorizations (which tool, which grants, who approved it) | the app's database, per organization | to check a connected app on every call |
| Usage metering (per day, per data type, per operation) | the app's database, per organization | the Usage page and the invoice |
| The opt-in cache, when it is on | encrypted, per organization, TTL up to 24 h | to answer repeated lists without calling Exact again |
| Account, organization and billing records | in the portal | to run the subscription |
What we do not store¶
- Exact data is passed through, not kept. A call reads from Exact, is checked against the grants, and is sent to the caller. We hold no standing copy of your customers, invoices or ledger, the only exception is the opt-in cache, which is encrypted, per organization, TTL-bounded, and is purged the moment the Exact connection is disconnected or needs re-authorization, so a stale copy can never outlive the connection it came from.
- No Exact refresh tokens in this app. The portal's Exact token broker hands Data Bridge a short-lived access token (10 minutes, memory only) per call; the refresh token stays in the portal, encrypted.
- No credentials, no sessions, no billing records here. Accounts, sessions, two-factor and billing live in the portal; Data Bridge has none of them.
- No telemetry or tracking. The service has no analytics, no license check and no advertising.
What leaves our servers¶
| To | What | Why |
|---|---|---|
| your keys and connected tools | the Exact data the call is granted | the purpose of the service |
Exact Online (start.exactonline.*) |
the reads the calls trigger | the purpose of the service |
| Mollie | the payment for the subscription, in the portal | billing |
A call returns only what the caller's grants cover, and only from the administrations the key is allowed to see. Denied calls are audited in the portal's audit log (what, by which key, and why).
Your responsibilities¶
- Give each key and connected app only the access it needs, per data type, level and administration.
- Keep the IP allowlist on a key when the caller has a fixed address.
- Keep the portal's admin accounts protected: creating keys and approving an AI tool require an organization owner or administrator and two-factor authentication, and an AI tool keeps working only while that remains true.
- Revoke a key or a connected app the moment a person leaves or a project ends: it stops immediately.
Your rights and deletion¶
Questions about your data, or a request for export or deletion, go to info@mvdw-software.com. Deleting an organization in the portal deletes everything the app stores for it (keys, grants, connected apps, metering, cache), immediately.