Data processing terms
Published · Updated
These terms apply when a business ("you", the controller) uses a Smallwright product to hold personal data about other people — for example the clients you add to MTD Chase and the records they send you, or the customers in Grommetbook. VINNYROO LLC ("we") processes that data only on your behalf. They form part of the Terms.
What we process, and why
Names, email addresses, mobile numbers and other details you or your AI assistant add, files and notes your clients send through their links, and the history of requests and reminders — only to provide the product to you, as you instruct through the product and its tools.
Our commitments (UK GDPR Article 28)
- We act only on your documented instructions (the product's features and your settings), unless the law requires otherwise.
- Everyone who works on our products is bound by confidentiality.
- Security: encryption in transit and at rest, per-account isolation on every request, no passwords (emailed sign-in links), hashed access tokens, audit logs of changes, and automatic deletion of client files after your retention setting.
- Sub-processors: Google Cloud / Firebase (hosting, database, file storage, sign-in; United States), Stripe (billing, for the account owner only), Cloudflare (DNS and email forwarding), Google Gmail (sending emails). We'll list changes in the changelog before they take effect.
- International transfers: data is stored in the United States under our sub-processors' data processing terms, which include the UK International Data Transfer Addendum / UK Extension to the EU-US Data Privacy Framework where applicable.
- We help you answer requests from the people whose data it is (export everything with your assistant; correct or delete on request).
- We tell you without undue delay if we become aware of a personal data breach affecting your data.
- When you close your account, we delete your data within 30 days (backups roll off within a further 30 days), unless the law requires us to keep it.
- We make available the information needed to show we meet these terms; email us for it.
Contact
VINNYROO LLC (trading as Smallwright) · support@smallwright.com