What we do with your company's data, and on whose instructions.

01Who is who

Your company decides what goes into Restomo and what it is used for, which makes your company the controller of that data. Restomo processes it on your instructions to run the service, which makes us the processor. Where United States state privacy law uses different words, we are your service provider and we do not sell or share personal information.

02What we process, and why

• Your people: names, work email addresses or usernames, phone numbers, access levels and the record of when they signed in.
• Your customers: names, property addresses, phone numbers, email addresses and insurance claim numbers, entered by your company.
• Your job records: stages, notes, activity, hours, dollars, photographs, room scans, floor plans and documents.
• Location, where your company has switched on location sharing and a person is clocked in.
• Audio, where a person records a voice note or dictates into a form.

We process all of it to provide Restomo to your company, to support you when you ask, to keep the service secure and to fix problems. We do not process it for advertising, we do not sell it, and we do not use your job data to train models.

03Instructions and confidentiality

We act on your documented instructions, which are this agreement and your use of the product. Everyone at Restomo with any access to customer data is under a confidentiality obligation that survives their leaving. Restomo staff do not read your job data in the normal course of business, and when support needs to look at a record it is because you asked us to.

04Security

The measures are listed on the security page and that page is part of this agreement by reference. In summary: every row carries your company's identifier and the database enforces the separation rather than the application, data is encrypted at rest and in transit, the database keeps a continuous backup, and access inside your company is controlled by the access levels your owner sets.

05Subprocessors

We use a small number of vendors to run Restomo, and each one is listed on the subprocessors page with what it does and where it holds data. Each is bound by terms no weaker than these. When we add or replace one, we update that page and tell the owner of every company on Restomo before the change takes effect, so you have time to object.

06When somebody asks you for their data

If a person asks your company for a copy of their data, for a correction, or for deletion, the product covers most of it: exports and account deletion are both available to you without asking us. Where you need our help, ask and we will help within the time the law gives you rather than on our own schedule.

07If something goes wrong

If we become aware of a breach of security affecting your data, we tell you without undue delay and in any case within seventy two hours of becoming aware, with what we know, what we are doing about it and what we recommend you do. We do not wait until the investigation is finished to tell you it is happening.

08Getting your data back, and deletion

You can export everything your company holds at any time, while you are a customer and for thirty days after you stop being one. After that, or sooner if you ask, we delete it and confirm in writing. Backups roll off on their own schedule and anything inside them is overwritten within thirty five days.

09Where the data lives

In the United States. If that ever changes, this page changes first and the owner of every company on Restomo hears about it before the change happens.