Effective October 4, 2026
Data Processing Agreement
This agreement governs how TechQB processes personal data on behalf of our contractor customers. It's here for enterprise buyers, compliance teams, and anyone who needs it.
1. Definitions
"Controller" means the TechQB customer (the garage door contractor) who determines the purposes of processing customer data. "Processor" means TechQB, which processes data on the Controller's behalf. "Personal Data" means any information relating to an identifiable individual submitted through the TechQB platform, including customer names, contact details, photos, and service addresses.
2. Scope
This DPA applies when TechQB processes Personal Data on behalf of the Controller in connection with the TechQB subscription services. It supplements the TechQB Terms of Service and Privacy Policy.
3. Processing instructions
TechQB will process Personal Data only on documented instructions from the Controller — namely, to provide triage reports, operate the widget, send service notifications, and maintain the platform. TechQB will not process Personal Data for its own independent purposes.
4. Confidentiality
All personnel authorized to process Personal Data are bound by confidentiality obligations. Access is limited to what is necessary to provide the services.
5. Security
TechQB implements appropriate technical and organizational measures: encryption in transit (TLS) and at rest, access controls, authentication requirements, and regular security review. Payment data is processed exclusively by Stripe (PCI-DSS compliant); TechQB does not store full card numbers.
6. Sub-processors
TechQB uses the following sub-processors: Vercel (hosting), Neon (database), Stripe (payments), Resend (email delivery). TechQB will notify the Controller of any new sub-processor at least 14 days in advance. The Controller may object on reasonable grounds; if no alternative is available, the Controller may terminate the affected services.
7. Data subject rights
TechQB will assist the Controller in fulfilling data subject requests (access, correction, deletion, portability) by providing reasonable technical means. The Controller is responsible for verifying the identity of requesters and determining the appropriate response.
8. Breach notification
TechQB will notify the Controller without undue delay — and within 72 hours where feasible — after becoming aware of a personal data breach affecting the Controller's data. The notice will describe the nature of the breach, categories of data affected, and mitigation steps taken.
9. Data retention and deletion
Personal Data is retained per the Controller's evidence retention setting (30 days to 1 year) and as described in the Privacy Policy. Upon termination of services, TechQB will delete or return Personal Data within 90 days, except where retention is required by law.
10. International transfers
Data is primarily processed in the United States. Where transfers outside the Controller's jurisdiction occur, TechQB will implement appropriate safeguards such as Standard Contractual Clauses.
11. Audits
The Controller may audit TechQB's compliance with this DPA once per year with 30 days' written notice, at the Controller's expense. Audits will be conducted during business hours and will not unreasonably disrupt operations.
12. Liability
Liability under this DPA is subject to the limitation of liability in the TechQB Terms of Service.
13. Term
This DPA remains in effect for the duration of the Controller's TechQB subscription and for the data retention period thereafter.
Contact
Data protection inquiries: support@ggaurdai.com