Privacy
Last updated 2026-08-24.
The Czech version governs. This translation is provided for convenience; where the two differ, the Czech text is the one that applies.
Who the controller is
The controller is [DOPLNIT], company number [DOPLNIT], registered at [DOPLNIT]. Referred to below as “Struo”.
For anything concerning personal data, write to [DOPLNIT]. We have not appointed a data protection officer, as we do not meet the conditions of Article 37 GDPR.
Two distinct roles
This distinction decides who you should contact, so it is stated up front rather than in a footnote.
- We are the controller
- for the data of people who hold an account with us, for the billing details of companies paying for our services, and for visitors to this website. For that data we decide why and how it is processed, and we answer for it.
- We are a processor
- for data that customer companies enter into our applications, chiefly the data of their own customers and staff. There the purpose is set by the company using the application, and that company is the controller. We only do with it what they instruct. To exercise your rights over such data, contact that company; we will assist them.
What we process as controller
| Data | Why | Lawful basis |
|---|---|---|
| Name, email address, account identifier | So you can sign in and we know who you are | Performance of a contract |
| Company name, company and VAT number, billing address | Issuing tax documents and bookkeeping | Legal obligation |
| Payment identifiers and subscription status | Managing the subscription | Performance of a contract |
| Email address in an invitation | Delivering the invitation and matching it to an account | Legitimate interest in running the service |
| Aggregate traffic to this site and our applications | To know what people are interested in | Legitimate interest |
Traffic is measured with software we run on our own server, which sets no cookies and stores no IP addresses. Nothing about your visit is sent to a third-party analytics service, which is why we do not ask you to accept cookies.
What we process as a processor
If your company uses our field-work application, it will typically hold, depending on what your company puts into it:
- names, phone numbers and email addresses of customers and their contacts,
- customer billing details including address, company and VAT number,
- addresses of job sites, including geographic coordinates,
- photographs and files taken at a job,
- records of messages sent to a customer.
We use this data for nothing other than running the service for that company. We do not pass it on and we do not sell it.
Where it is stored and who receives it
| Recipient | What | Where |
|---|---|---|
| Hetzner Online GmbH | Server hosting, so all application data | Falkenstein, Germany (EU) |
| Backblaze, Inc. | Encrypted database backups | United States |
| Stripe | Payment processing and billing details | EU and USA |
| Resend | Sending email, so recipient address and message content | EU |
| Signing in with a Google account, if you choose it, and map data for job addresses | EU and USA |
Backups leave the European Union. They are stored in the United States, encrypted, and the transfer relies on the European Commission's standard contractual clauses. We say so explicitly because it is the only point at which your data leaves the EU in normal operation.
Identity and sign-in run on our own server rather than at an external provider. Your password therefore never reaches a third party, and if you sign in with Google we learn only your name and email address from them.
How long we keep it
- Account data
- For as long as the account exists, and 30 days after it is closed.
- Data entered by a customer company
- For as long as that company decides. On termination we delete or hand it over on their instruction.
- Accounting records
- 10 years, as Czech accounting and VAT law requires.
- Backups
- At most the 30 most recent. Deleted data may therefore persist in a backup until a newer one replaces it; we do not search backups or use them for anything but recovery after a failure.
Your rights
You have the right of access to your data, to rectification, erasure and portability, to restriction of processing, and to object to processing based on legitimate interest. Write to the address above and we will answer within one month.
You may also lodge a complaint with the Czech Data Protection Authority.
Changes
We change this document whenever what it describes changes. The date of the last change is at the top and the edit history is kept in our version control.