Data Processing Addendum

1. Scope and roles

You decide what personal information is put into your workspace and why. That includes your customers’ contact and address details, your workers’ details and time records, and location points recorded at visit actions. We process it only to provide the service to you.

2. Your instructions

We process personal information only on your documented instructions, which are these terms and your use and configuration of the service, unless the law requires otherwise. In that case we will tell you first, unless the law prohibits it.

3. Confidentiality

Anyone we authorize to process your personal information is bound by a duty of confidentiality.

4. Subprocessors

You authorize the subprocessors listed on our subprocessors page. We will give at least 30 days’ notice before adding or replacing one, by updating that page and notifying account owners. You may object on reasonable data-protection grounds. If we cannot address the objection, you may end the affected service. We remain responsible for our subprocessors’ performance of these obligations.

5. Security

• Each workspace’s data is isolated at the database level with row-level security, and we test that isolation against the database.
• All traffic is encrypted in transit, and our hosting and database providers encrypt stored data at rest.
• Access within a workspace is limited by role, and card data is handled by Stripe and never stored by us.
• Uploaded files are kept in private storage and are served only to signed-in users of the workspace they belong to.

6. Helping you

Taking into account the nature of the processing, we will help you respond to requests from individuals exercising their rights, and with security, breach notification and data-protection assessments, as far as they concern our processing.

7. Security incidents

If we become aware of a breach of security leading to unauthorized access to, or loss of, your personal information, we will notify you without undue delay and within 72 hours. We will give you the information you reasonably need to meet your own obligations.

8. Deletion at the end of the service

When your workspace is closed, we will make your data available to you on request for 30 days and then delete it within 90 days, except where the law requires us to keep it.

9. Audits

On reasonable written request, and no more than once a year, we will provide the information needed to show that we comply with this addendum.

10. Where data is processed

Personal information is stored and processed in the United States.

11. Precedence

If this addendum conflicts with the Terms of Service about personal information, this addendum controls.