Data processing terms

Scope and instructions

Processing consists of storing, organizing, retrieving, displaying, exporting, sharing at your request and deleting estimates and their revisions, business details and saved line items. Records may include customer names, emails, addresses and information about painting work. Processing lasts while the data is stored under the service agreement and its documented recovery retention. Your use of the editor, sharing controls and deletion function constitutes instructions; contact support for other instructions. We will tell you if we believe an instruction conflicts with applicable data protection requirements.

Safeguards and providers

We limit access to people and services that need it to operate or support Trazo and require appropriate confidentiality. Safeguards include authenticated access, account separation, encrypted transport, restricted service permissions, private recovery encryption and revocable share links. You authorize Google Firebase/Google Cloud for authentication and data storage, Vercel for hosting and GitHub for encrypted recovery storage. Stripe processes billing information under its applicable terms. We remain responsible for meeting our processor obligations and require appropriate data protection commitments from service providers.

We will provide notice before a material change to providers processing estimate contents, allowing a reasonable opportunity to raise a data protection objection. Where international transfers occur, we use applicable contractual safeguards and provider data processing terms. Contact us for information needed to assess these arrangements.

Assistance and incidents

Taking account of the processing and available information, we assist with data subject requests, security obligations, impact assessments and regulatory enquiries. We notify you without undue delay after becoming aware of a personal data breach affecting your customer records and provide available information needed to respond. We supply reasonable compliance information and cooperate with proportionate audits coordinated through support, subject to confidentiality and protection of other customers.

Return and deletion

Export records from Account settings before requesting deletion. Deletion removes live application records and invalidates shared access; encrypted recovery artifacts expire within seven days. A minimal deletion marker prevents restoration of removed records. Information that must be retained under applicable law is isolated from ordinary service use. Your business remains responsible for its own downloaded copies and information already shared with customers.

Contact

Fluxer Labs SL
Paseo Peatonal de las Pasteleras, 2, puerta 15, 38410 Los Realejos, Santa Cruz de Tenerife, Spain
Tax identification: B24829392
info@fluxerlabs.com