Data Processing Addendum

This Data Processing Addendum applies when a business customer uses getContracted to process personal information in customer, property, quote, service agreement, file, email, CRM, or signature workflows.

The business customer generally determines the purposes and means of processing that customer workflow data. OnlineTools Kft. processes that data to provide, secure, support, maintain, and improve getContracted.

Depending on the law that applies, OnlineTools Kft. may act as a processor, service provider, contractor, or similar service-role provider for customer workflow data.

Processing may include hosting, storage, authentication, search, email delivery, PDF generation, customer and property workflow operation, service agreement and quote handling, signature workflow support, billing, support, logging, security, analytics where enabled, and backup operations.

Categories may include business contact data, user account data, customer contact data, property information, service agreement details, quote details, uploaded files, generated documents, communication records, billing references, signature records, and technical logs.

The processing continues for the term of the customer account and any additional period needed for deletion, export, backup, legal retention, security, or dispute-resolution purposes.

OnlineTools Kft. processes customer workflow data according to the customer agreement, product configuration, documented customer instructions, and applicable law.

The customer is responsible for ensuring it has the rights, notices, consents, legal bases, and permissions needed to enter and use data in getContracted.

The service may use providers such as Firebase/Google Cloud, Vercel, Algolia, Stripe, MailerSend, OpenAI, Anthropic, and other operational vendors for hosting, storage, authentication, search, billing, email, AI-assisted features where enabled, monitoring, and support.

OnlineTools Kft. remains responsible for using service providers in a way that supports the service and protects customer workflow data according to the applicable agreement.

Provider availability, data locations, and security measures may change as the product and infrastructure evolve.

OnlineTools Kft. uses administrative, technical, and organizational measures intended to protect customer workflow data, including authenticated access, managed cloud infrastructure, encrypted transport, role-aware access surfaces, logging, backups, and separation between public routes and authenticated workflows.

Personnel and providers that access customer workflow data must do so for service operation, support, security, legal, or administrative purposes.

OnlineTools Kft. will provide reasonable assistance for customer data access, deletion, export, correction, and security requests where the product, agreement, and applicable law require it.

If an end customer contacts OnlineTools Kft. directly about a contractor record, OnlineTools Kft. may route the request to the applicable business customer where appropriate.

OnlineTools Kft. will notify affected business customers without undue delay after confirming a security incident involving customer workflow data, subject to investigation, law enforcement, legal, and security constraints.

Notice may include the nature of the incident, affected data categories where known, mitigation steps, and recommended customer actions where appropriate.

Upon account termination or a verified deletion request, customer workflow data will be returned, exported, deleted, anonymized, or retained according to the product functionality, customer agreement, legal obligations, backup retention, billing records, security needs, and deletion audit requirements.

Production deletion behavior must match the tested operational deletion and tenant-isolation flows.

Customer workflow data may be processed in the United States, the European Economic Area, and other locations where OnlineTools Kft. or its providers operate.

Where required, transfers are handled through provider data-processing terms, standard contractual clauses, or other legally available transfer mechanisms.

Questions about this Data Processing Addendum can be sent to info@getcontracted.online.