What we do with your company's data, and on whose instructions.

01Who is who

This Data Processing Agreement is part of the Restomo Terms of Service and takes effect on October 1, 2026. Your company decides what goes into Restomo and what it is used for, which makes your company the controller of that data. Restomo processes it on your instructions to run the service, which makes us the processor. Where United States state privacy law uses different words, we are your service provider, and we do not sell or share personal information.

02What we process, and why

• About your people, we process their names, email addresses, phone numbers, photos, access levels and time cards, and the record of when they signed in.
• About your customers and the other people on your jobs, we process the names, property addresses, phone numbers, email addresses, insurance claim and policy numbers, adjuster details and notes that your company enters.
• From your job records, we process stages, notes, activity, hours, dollars, photographs, videos, room scans, floor plans, documents and chat.
• When a person signs through a Restomo signing link, we process their typed name, their drawn signature, the time, their IP address and their browser details.
• We process location only as your company and each person allow it: clock-in and clock-out points, positions while clocked in, and job site arrivals and departures when arrival reminders are on.
• We process audio that people attach to chat or notes, and the words of what a person says to Romo.
• For a person who connects their own Google account, we process their calendar events and the email they choose to send through Restomo.

We process all of it to provide Restomo to your company, to support you when you ask, to keep the service secure and to fix problems. We do not sell it or share it for cross-context behavioral advertising, we do not use it for advertising, we do not combine it with information from other sources except to provide Restomo, and we do not use it to train AI models. We give it the level of protection that United States state privacy laws require.

03Instructions and confidentiality

We act on your documented instructions, which are this agreement, the Terms of Service and your use of the product. If we believe an instruction breaks the law, we tell you. We make sure that everyone at Restomo who can access your data is bound to keep it confidential. Only a small number of Restomo administrators can open a company's account, and they do so only to support your company when you ask, to keep Restomo secure and working, or when the law requires it.

If we can no longer meet our obligations under this agreement or under privacy law, we tell you, and you may take reasonable steps to stop and fix any use of your data that is not authorized, including ending the agreement.

04Security

The measures are listed on the security page, and that page is part of this agreement by reference. In summary, every row carries your company's identifier and the database enforces the separation rather than the application, data is encrypted at rest and in transit, the database keeps continuous backups, and access inside your company is controlled by the access levels your Owner sets.

05Subprocessors

We use the vendors listed on the subprocessors page, which says what each one does and what it receives. We give each one only what its job needs, each one handles your data under its own terms of service or a contract with us, and we remain responsible to you for their work under this agreement.

When we add or replace a vendor, we update the subprocessors page and email the Owner of every company at least 30 days before the change takes effect, unless an urgent security or legal reason needs a faster change, in which case we tell you as soon as we can. If you object on reasonable data protection grounds, tell us. If we cannot address the objection, you may cancel, and we refund the unused part of the month.

06Helping you with requests and reviews

If a person asks your company for a copy of their data, for a correction or for deletion, the product covers much of it: exports and account deletion are available to you without asking us. Where you need our help, including with a request, a data protection assessment or a question from a regulator, ask and we will help within the time the law gives you rather than on our own schedule.

Once a year, and after any breach, we answer your reasonable written questions about how we protect your data, and we give you the information you need to show your own compliance.

07If something goes wrong

If we become aware of a breach of security affecting your data, we tell you without undue delay and in any case within 72 hours of becoming aware, with what we know, what we are doing about it and what we recommend you do. We do not wait until the investigation is finished to tell you it is happening.

08Getting your data back, and deletion

You can export your boards, contacts, reports, hours and documents yourself at any time, and the Owner can ask support@restomo.com for a full copy of everything your company holds, which we send within 30 days at no charge.

When your subscription ends, we keep your data until the Owner asks us to delete it, and we then delete it within 30 days and confirm in writing. We may also delete it after 12 months without an active subscription, after emailing the Owner at least 30 days ahead. Copies in backups expire on the schedule in the Privacy Policy, and backups are used only to recover the service.

09Where the data lives

Restomo stores your data in the United States, in Amazon Web Services. A few vendors on the subprocessors page receive small pieces of data to do their one job, and the address suggestion service may process the part of an address someone types outside the United States. If where we store your data ever changes, this page changes first, and the Owner of every company hears about it before the change happens.