Privacy Policy & GDPR Data Processing Notice
Data Controller: Taraily UAB · Žalgirio g. 92, LT-09303 Vilnius, Lithuania · Contact: privacy@taraily.com
1. Scope and Role Under GDPR
Taraily provides commercial field-service quoting, client proposal approval, and job cost reconciliation software for specialty contractors. Under Regulation (EU) 2016/679 (General Data Protection Regulation — “GDPR”), Taraily acts as a Data Controller for contractor account and billing information, and as a Data Processor on behalf of our subscribing contractors for customer proposal records, site addresses, and digital signature certificates (CERT #TAR-SIG).
2. Categories of Data Processed
- Contractor Account & Company Profile Data: Work email address, company legal name, VAT/Tax identification number, SEPA IBAN settlement coordinates, and hourly labor rates.
- Proposal & Job-Site Records: Client name, site address, equipment inspection notes, site photographs, itemized material/labor pricing, and selected package tier.
- Electronic Signature Audit Trail: Authorized signatory name, UTC/local signature timestamp, drawn signature specimen, and proposal certificate ID.
- Billing & Payment Metadata: Subscription and 30% customer deposit transactions are processed directly by Stripe (PCI-DSS Level 1 certified). Taraily never stores raw payment card numbers.
3. Authorized Sub-Processors & Infrastructure
| Sub-Processor | Purpose | Safeguards |
|---|---|---|
| Stripe Payments Europe Ltd. | Subscription billing, deposit checkout & encrypted customer metadata vault | EU/EEA & PCI-DSS Level 1 |
| Resend Inc. | Transactional 6-digit OTP login codes & signed proposal email notifications | TLS encryption + SCCs |
| Vercel Inc. / AWS Frankfurt | Edge application routing & serverless compute | ISO 27001 / SOC 2 Type II |
4. Data Retention, Export & Deletion Rights
Contractors can export 100% of their job cost and proposal ledgers in standard CSV format at any time via /dashboard/reconcile. To exercise GDPR rights of access, rectification, portability, or erasure (Article 17), contact our Data Protection Officer at privacy@taraily.com.