Who this covers

This Data Processing Addendum (“DPA”) forms part of the Terms of Service when you use Spanner Pro cloud backup. It applies only to personal data about your customers and job contacts that you upload so we can store and sync it for you.

It does not cover your own account email, subscription status, or App Check tokens. For those, Spanner is the controller — see the Privacy Policy.

Roles

You (the trader) are the controller of personal data you enter about your customers (names, phones, emails, addresses, job notes, photos that identify people, and similar).
Spanner (Josh Mason trading as Spanner) is the processor of that data when cloud backup is on. We process it only to provide backup, multi-device sync, and the web portal at portal.spanner.pro, on your instructions.

You are responsible for having a lawful basis to put other people’s details into Spanner and for honouring their rights under UK GDPR.

What we process

Categories typically include customer contact details, job and site addresses, quote and invoice content, line items, and job photos you attach. We do not decide which customers you store.

Instructions

We process that data only to:

store a backup copy in the European Union;
sync it to devices and the portal where you are signed in with your Pro account;
generate PDFs and similar outputs at your request in the app;
delete it when you use Delete account, when you soft-delete a record and the retention window ends, or when you ask us in writing.

We will not sell it, use it for advertising, or use it to contact your customers.

Sub-processors

Infrastructure is provided by Cloudflare, Inc. (Workers, D1, R2, email sending). Cloudflare processes data on our behalf under its data processing terms. Backed-up records and photos are stored in the European Union. We will update this page if we add a material sub-processor for customer-of-customer data.

Security

We use TLS in transit, Cloudflare platform encryption at rest, owner-scoped sync so one account cannot read another’s rows, hashed session tokens, and Firebase App Check on the API. Login email is encrypted at application level. Customer CRM fields and business bank details in the backup are readable by Spanner and Cloudflare operators who run the service — this is not end-to-end encryption.

Retention and deletion

Live backup data is kept while your account exists.
Soft-deleted records (tombstones) are kept for up to 30 days so every device can learn about the delete, then hard-deleted from our database (and photo storage where applicable).
Delete account in Settings removes the live cloud copy when the request succeeds. If the cloud wipe fails, the app leaves your phone alone so you can retry.
You can also email josh@spanner.pro from the address you signed in with. We will action a deletion request within 30 days.

Assistance

We will help you respond to data-subject requests that relate to data we hold as your processor, insofar as you cannot do it yourself in the app. Contact josh@spanner.pro.

International transfers

Where processing involves a transfer outside the UK, we rely on UK-approved safeguards such as the International Data Transfer Agreement or Addendum, as described in the Privacy Policy.

Liability and term

This DPA lasts for as long as we process customer-of-customer data for your Pro backup. Liability remains as set out in the Terms. If there is a conflict on processing of that data, this DPA prevails over the Privacy Policy for that conflict only.

Contact

Josh Mason trading as Spanner · Unit 82701, PO Box 92, Cardiff, CF11 1NB, United Kingdom · josh@spanner.pro · ICO: ZC243782.