Schedule 1 · Subject and duration
Processing covers the configured QuoteCortex survey, inventory review, approval, report/export, and account-support workflows for the moving company. Duration follows the business account and configured records. No default media or backup retention period is stated here.
Schedule 2 · Nature and purpose
Processing includes collection through private links, resumable upload, evidence-frame preparation, AI-assisted organization when enabled, mover and customer review, approval, export, CRM handoff, security, support, and deletion requests.
Schedule 3 · Data categories and subjects
- Business account, team, branding, CRM, and catalog data.
- Moving-customer contact and move details.
- Walkthrough video/audio, evidence frames, inventory, packing, access, edits, approvals, and audit metadata.
- Provider, delivery, billing, and security metadata only when the related feature is enabled.
Schedule 4 · Security measures
Current measures include server/worker-only secrets, tenant-scoped authorization, row-level security, opaque customer capability tokens, scoped cookies, idempotent mutations, explicit provider gates, audit boundaries, and deletion-job verification. See Security for the public summary.
Schedule 5 · Subprocessors
The current registry is at /legal/subprocessors. A provider is not listed as active merely because an integration or environment variable exists; status is tied to the configured path and evidence.
Schedule 6 · Deletion and assistance
The application supports owner/admin media deletion requests and structured privacy requests for operator review. Return/delete timing, audit assistance, incident commitments, international transfers, and liability are not stated here and require a separate signed agreement.
This page describes the current product boundary. It is not a signed agreement, legal advice, or a certification. Questions and privacy requests can use the structured contact route.
