Privacy policy

Data and purposes

We use your sign-in email and account identifier to provide access; your business details, customer details, estimates, versions and saved line items to provide the workspace; and subscription status and Stripe references to manage your plan. You choose the information entered into an estimate. Do not include sensitive personal information that is unnecessary for the job.

Fluxer Labs SL is responsible for account administration, support and service security. For customer information you enter into estimates, we process it on your instructions under our data processing terms. You are responsible for having an appropriate basis to collect and use your customers’ information.

Where data goes

Firebase Authentication handles sign-in and Google Cloud Firestore stores application data. The Trazo Firestore database is in europe-west1. Vercel hosts the application. Stripe handles payment details directly; Trazo does not receive your full card number. Encrypted recovery copies are held in the private GitHub repository for seven days. These providers may process service or account data outside your country; their applicable data processing agreements and transfer safeguards govern those transfers. The Firestore location does not mean all processing takes place in Europe.

Local storage and optional analytics

Your browser stores temporary estimate drafts, sign-in state and your privacy choice to make the service work. Drafts may remain after signing out on a shared computer. Clear them using the editor or your browser settings when needed.

Optional analytics are off until you select “Allow analytics.” They count page visits, registrations, saves, downloads, checkout starts and observed Pro activations. We store daily aggregate counts, without names, document contents, tracking IDs, raw URLs or advertising click IDs. These counts are not unique visitor statistics or verified revenue. You can withdraw permission through “Privacy choices” at the bottom of the page. Withdrawal stops future events; anonymous totals already counted cannot be linked back to you.

Security checks and operational diagnostics run independently of optional analytics. Our application diagnostics use fixed error categories. Hosting and authentication providers may process network information such as IP addresses for delivery and abuse prevention. We do not sell customer information or use estimate contents for advertising.

Sharing and retention

Saved estimates remain in your account until deletion, including after your subscription ends. Anyone with a private share link can view its saved revision. Revoke links from the estimate editor to stop future access; copies already downloaded by recipients cannot be recalled.

Account settings let you export your data and request deletion after confirming your identity. Any subscription must have ended first so the account is not removed while recurring billing remains active. Deletion removes application records and the sign-in account and disables shared access. If a cleanup fails, the account is locked and the process can be retried. A minimal deletion marker is retained to prevent records from being restored from backups.

Encrypted backup artifacts expire after seven days. Our restoration procedure excludes deleted accounts. Optional event aggregates expire after 30 days; application error counters after seven days. Financial records handled by Stripe and records necessary for accounting or legal obligations may need to be retained separately. Contact us about a specific request.

Your choices and rights

We use account and workspace data to perform the service agreement, optional analytics on your consent, security information for our legitimate interest in protecting the service, and relevant financial information to meet applicable obligations. You can correct business details in the workspace, export or delete account data in Account settings, and contact us to request access, correction, restriction, objection or portability where applicable. We may ask you to verify your identity. You may complain to your local supervisory authority, including the Spanish Data Protection Agency (AEPD).

Trazo is intended for adults using it for their business. Material changes to this notice will be identified by an updated effective date; where required, we will provide additional notice or seek new consent.

Contact

Fluxer Labs SL
Paseo Peatonal de las Pasteleras, 2, puerta 15, 38410 Los Realejos, Santa Cruz de Tenerife, Spain
Tax identification: B24829392
info@fluxerlabs.com