Privacy and security

Data Processing & Security Addendum

Effective September 7, 2026

This addendum supplements the Terms of Service and Privacy Policy when Tejera Works processes personal information for a subscribing company. It is intended to establish practical responsibilities for company data and should be reviewed with counsel for any company that requires negotiated terms.

Roles and instructions

The subscribing company decides why and how its customer, worker, property, job, estimate, contract, photo, and communication records are used. Tejera Works processes those records to provide the features chosen and documented by the company, comply with law, protect the service, and follow the company’s lawful instructions. Each party remains responsible for the duties that apply to its role.

People, data, and purpose

Processing may concern company owners, workers, customers, prospects, property contacts, and authorized users. Data may include contact and account details, service addresses, job records, estimates, contracts, signatures, photos, communications, permissions, device and security logs, and subscription status. Processing continues while the account is active and afterward only as reasonably needed for security, disputes, legal duties, backups, or agreed retention.

Confidentiality and access

Tejera Works limits access to people and service providers who need it to operate, secure, support, or legally administer the service and who are subject to appropriate confidentiality duties. Company owners and authorized managers control their team’s access and must promptly remove access that is no longer needed.

Company separation

Tejera Works uses company-scoped authorization and storage controls intended to prevent one subscribing company from accessing another company’s leads, customers, estimates, jobs, files, team, or billing records. Platform-level access is limited to authorized support, security, fraud-prevention, accounting, and legal needs.

Security measures

Tejera Works maintains reasonable administrative, technical, and organizational safeguards appropriate to the service, including authenticated access, role checks, private caching controls, transport protection, scoped storage, activity records, security monitoring, and documented recovery procedures. No service can guarantee absolute security, and subscribing companies remain responsible for their devices, credentials, team permissions, exports, and lawful use.

Service providers

Tejera Works may use providers for hosting, authentication, storage, email, messaging, payments, maps, analytics, support, and optional integrations. We select providers for permitted services and review available confidentiality, security, and legal commitments appropriate to their role. A company may request information about current provider categories before subscribing.

Security incidents

If Tejera Works confirms unauthorized access to company data, we will investigate, contain the incident, preserve relevant evidence, take reasonable corrective action, and notify the affected company without undue delay when required by applicable law. The notice will include available information reasonably needed for the company to meet its legal duties. Notification is not an admission of fault or liability.

Privacy requests and cooperation

Tejera Works will provide reasonable assistance when a subscribing company needs to respond to an eligible privacy request, security inquiry, or legally required assessment concerning company data. Requests must be verified, proportionate, and submitted through an authorized company owner.

Return, deletion, and legal retention

Company owners should export records they are legally required to keep before ending service. Eligible company data will be deleted or deidentified when no longer reasonably needed, subject to backup cycles, security records, fraud prevention, disputes, tax and accounting duties, and other legal retention requirements.

Conflicts and contact

If this addendum conflicts with the Terms of Service about processing company data, this addendum controls only for that processing issue. Mandatory rights under applicable law remain in effect. Questions or requests for a signed or negotiated addendum may be sent to tejeraworks@gmail.com.