Skip to main content

Legal center · B2B

Data processing addendum

A readable, printable outline of current processing boundaries; a signed DPA requires separate approved terms.

Template: signed agreement requiredLast updated September 4, 2026

Schedule 1 · Subject and duration

Processing covers the configured QuoteCortex survey, inventory review, approval, report/export, and account-support workflows for the moving company. Duration follows the business account and configured records. No default media or backup retention period is stated here.

Schedule 2 · Nature and purpose

Processing includes collection through private links, resumable upload, evidence-frame preparation, AI-assisted organization when enabled, mover and customer review, approval, export, CRM handoff, security, support, and deletion requests.

Schedule 3 · Data categories and subjects

  • Business account, team, branding, CRM, and catalog data.
  • Moving-customer contact and move details.
  • Walkthrough video/audio, evidence frames, inventory, packing, access, edits, approvals, and audit metadata.
  • Provider, delivery, billing, and security metadata only when the related feature is enabled.

Schedule 4 · Security measures

Current measures include server/worker-only secrets, tenant-scoped authorization, row-level security, opaque customer capability tokens, scoped cookies, idempotent mutations, explicit provider gates, audit boundaries, and deletion-job verification. See Security for the public summary.

Schedule 5 · Subprocessors

The current registry is at /legal/subprocessors. A provider is not listed as active merely because an integration or environment variable exists; status is tied to the configured path and evidence.

Schedule 6 · Deletion and assistance

The application supports owner/admin media deletion requests and structured privacy requests for operator review. Return/delete timing, audit assistance, incident commitments, international transfers, and liability are not stated here and require a separate signed agreement.

This page describes the current product boundary. It is not a signed agreement, legal advice, or a certification. Questions and privacy requests can use the structured contact route.