Data processing agreement
Last updated November 1, 2026.
This agreement is part of our terms of service. It covers the personal details that homeowners send to your business through your SliderWorks designer. For those details your business is the controller and SliderWorks (Muhammad Saad, sole trader (autónomo), tax number NIE Z0363350R, Carrer de Sant Francesc de Paula, 4, 46024 Valencia, Spain) is your processor, as the EU General Data Protection Regulation (GDPR, Article 28) describes.
What we process, and why
- Purpose: to run your designer and business area: receive, store and show your customers’ requests, send you and them the emails the service needs, and pass new leads to the CRM or addresses you connect.
- Details: name, email, phone, postcode or address, the pergola design and its price, messages, and the record of the customer’s consent. No special categories of data (such as health or religion): don’t ask your customers for them in the designer.
- People: homeowners and other visitors who send a request through your designer.
- Duration: as long as your account is active, and up to 30 days after it closes.
What we promise
- We process the details only on your instructions, which are these terms and the settings you choose, unless the law requires otherwise; then we tell you first if the law allows.
- Everyone who works with the details is bound to keep them confidential.
- We protect them with the measures on our Security page: HTTPS, scrambled passwords, two-step login, personal logins with access levels, and encrypted storage at our providers.
- We help you answer your customers when they ask to see, correct or delete their details, and with any data protection assessment you need.
- We tell you without undue delay, and within 48 hours of finding out, if your customers’ details are lost, stolen or seen by someone who should not see them.
- When your account closes, we delete the details within 30 days. Before that you can download them as a spreadsheet.
- We give you the information you need to check that we keep this agreement, and allow reasonable audits with notice.
Sub-processors
You allow us to use these companies, each under a contract that gives the details the same protection:
- Vercel Inc. (USA): runs the app; stores files in Frankfurt, Germany.
- Neon (database servers in Frankfurt, Germany): stores accounts, settings and leads.
- Resend (email servers in Ireland): sends the emails.
We tell you at least 30 days before we add or replace a sub-processor. If you object for a good reason and we can’t find a solution, you can end your plan.
Details outside the European Union
Vercel Inc. is based in the USA. It takes part in the EU–U.S. Data Privacy Framework and signs the European Commission’s standard contractual clauses.
What your business promises
- You have a lawful reason to collect your customers’ details, and you tell them how you use them in your own privacy notice.
- Your instructions to us follow data protection law.
Liability and order
The limits of liability in our terms of service apply to this agreement too. If this agreement and the terms differ on personal details, this agreement wins.