Processing agreement
This agreement is part of the terms of service. It applies when you, our customer, use Reno Easy for personal data of your clients and leads. You are the controller of that data; we are the processor.
Last updated: October 20, 2026
1. What we process, and why
We process personal data only to provide Reno Easy to you, for as long as your account exists.
- Whose data: your clients, your leads, website visitors who send you a request, and the people in your company who use the account.
- Which data: contact details, addresses, photos, drawings and measurements of homes, notes, voice memos and transcripts, quotes, proposals, invoices, signatures (name, time, IP address, browser), and when documents and emails were opened.
- What we do with it: store it, show it to you, make designs, videos, drafts and transcripts, send emails on your behalf, and make pages your clients can open and sign.
2. Only on your instructions
We only process the data as you instruct us through the app and these terms, or when the law requires it; then we tell you first, unless the law forbids that. If we think an instruction breaks data protection law, we tell you.
3. Confidentiality
Everyone at Reno Easy who can reach the data is bound to confidentiality, and only looks at it when needed for support, maintenance or security.
4. Security
- Data and files are stored in the EU (Frankfurt), encrypted in transit and at rest.
- Every business can only reach its own data; the database itself enforces this.
- Access to the systems is limited to the few people who need it, with strong passwords and two-step login.
- IP addresses of widget visitors are only stored scrambled (hashed).
- Logs to spot errors and abuse.
5. Sub-processors
You allow us to use the sub-processors below. Each is bound by data protection terms at least as strict as this agreement. We tell you at least 30 days before we add or replace one; if you object for good reason and we can't solve it, you can cancel and we refund the unused part of your plan.
| Service | What for | Where |
|---|---|---|
| Supabase | Database, login and file storageEU (Germany) | EU (Germany) |
| Vercel | Hosting of the app and websiteEU (Germany); company in the USA | EU (Germany); company in the USA |
| fal.ai | AI designs, videos, quote drafts and voice transcripts, with models from Google, OpenAI, Kuaishou (Kling) and AnthropicUSA; models in the USA and China | USA; models in the USA and China |
| Resend | Sending emails, and seeing whether they were openedUSA; emails sent from Japan | USA; emails sent from Japan |
| Whop | Subscription payments for Reno EasyUSA | USA |
| Cal.com | Booking sales calls with Reno EasyUSA | USA |
| Moneybird | Bookkeeping, only if you connect Moneybird yourselfNetherlands | Netherlands |
6. Outside the EU
Where a sub-processor handles data outside the EU, the transfer is covered by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
7. Helping you
We help you answer requests from people whose data you hold, to see, correct, delete or get a copy of it; most of this you can do yourself in the app. We also help, as far as reasonable, with impact assessments and questions from authorities.
8. Data breaches
If we discover a breach involving your data, we tell you without undue delay and within 48 hours at the latest, with what we know and what we are doing about it, so you can meet your own duty to report.
9. When it ends
You can download your data at any time. When your account ends, we delete your clients' data within 30 days, and backups roll over within another 30 days, unless the law requires us to keep it.
10. Checks
On request we give you the information you need to show that we comply. If that isn't enough, you may have an independent auditor, bound to confidentiality, check once a year, at your own cost and with 30 days' notice.
11. Liability and precedence
The limits of liability in the terms of service apply. If this agreement and the terms conflict, this agreement wins on data protection.