This DPA forms part of the Terms of use and applies where Pavr
processes personal data on your behalf.
Roles
For the data you put into Pavr — your employees, subcontractors, requests and customers —
you are the controller and Pavr is the processor. For your own account and billing
data, Pavr is the controller.
Scope of processing
Subject matter: provision of the Pavr platform.
Duration: while your account is open, plus the retention period in the
Privacy Policy.
Nature and purpose: storing and processing job records so you can estimate,
schedule, invoice and cost work.
Data subjects: your personnel, subcontractors, customers and their contacts.
Categories of personal data: names, contact details, job assignments, time-clock
records including GPS coordinates captured at clock-in and clock-out, photographs
taken on site, and signature records.
Our obligations
We process personal data only on your documented instructions, including those
implicit in your use of the product. We keep it confidential, apply appropriate
technical and organizational security measures, and assist you — taking into account
the nature of processing — with data-subject requests, breach notification and impact
assessments.
Sub-processors
You authorize the sub-processors below. We give notice before adding a new one, and
you may object on reasonable data-protection grounds.
| Sub-processor | Purpose | Data involved |
|---|---|---|
| Amazon Web Services (S3) | File storage | Job photos, receipts, signatures, generated PDFs |
| Amazon Web Services (SES, SNS) | Email sending, bounce and inbound mail handling | Recipient address, message content, delivery events |
| Heroku (Salesforce) | Hosting, database and backups | All account data |
| Stripe | Subscription billing; Pavr Payments (Stripe Connect) if you turn it on | Billing contact, card token, invoice history; with Pavr Payments, your business, owner and bank details for your Stripe account, and your customers' payments: payer name and email, amount, invoice, payment method details Stripe holds, refunds and disputes |
| Intuit QuickBooks Online | Optional accounting sync | Customers, invoices, payments you sync |
| Xero | Optional accounting sync | Contacts, invoices, payments, payouts and fees you sync |
| Twilio | Text messages (signing and payment codes, and links sent to your customers) | Phone number, message text |
| Cloudflare | DNS, encryption and network delivery for pavr.io; spam checks on public forms; caching and image delivery for contractor websites | All traffic to and from pavr.io in transit, visitor IP address, form submissions |
| Mapbox | Maps, address lookup and driving distance | Job addresses and coordinates, visitor IP address |
| Esri (ArcGIS) | Satellite imagery for measuring | Map area being viewed, visitor IP address |
| Satellite and street-level imagery on the site map | Map area being viewed, visitor IP address | |
| Chirp | Chat on pavr.io and in the app; answers Pavr's phone line | Chat messages, caller phone number and call details, visitor IP address |
| Honeybadger | Error monitoring | Error traces, which may include record identifiers |
| Plausible Analytics | Marketing-site analytics | Page views only; no cookies, no cross-site tracking |
QuickBooks Online, Xero and Pavr Payments are optional and receive data only if you turn them on, and Twilio only when Pavr sends a text. We also send a job address or location to public mapping and parcel services (U.S. Census Bureau, USGS, and county, state and provincial parcel portals) to look up a lot, and web-push messages travel through your browser maker's push service (Apple, Google or Mozilla).
Security
Encryption in transit and at rest; per-account data isolation enforced in the
application layer; role-based access control; application-level encryption of
sensitive fields; audit logging of record changes; production access restricted to
personnel who need it.
Personal data breach
We notify you without undue delay after becoming aware of a personal data breach
affecting your data, with the information you need to meet your own duties.
International transfers
Data is hosted in the United States. Where you transfer personal data from a region
that restricts international transfer, the parties rely on the appropriate safeguards
recognized in that region.
Deletion and return
On termination we delete or return personal data as described in the Privacy Policy,
except where retention is legally required.
Audit
We make available the information reasonably necessary to demonstrate compliance with
this DPA.