Your customers' data.

Our data processing addendum: how we handle the details your customers leave on your website. It is part of our terms.

LAST UPDATED October 29, 2026

THE SHORT VERSION

  • Your customers' details are yours. We handle them only to run your website and dashboard.
  • We don't sell them, advertise with them or use them to train AI.
  • Only Ruben and Sven can see them, and only when needed.
  • They're stored in Frankfurt, Germany, and your login reaches only your own site.
  • If something goes wrong, we tell you within 48 hours.
  • You don't need to sign anything.

01What this is

Your website and dashboard collect details of your customers: the messages they send through your contact form, their bookings and the people you ask for a review. For that data you are in charge and we, Ruberio (Burgemeester ter Veerstraat 15, 5066 GK Moergestel, the Netherlands, KvK 97390763), handle it for you.

Because we are based in the European Union, the EU General Data Protection Regulation (GDPR) requires a written agreement for that. This is it. You don't need to sign anything.

02What we do with it

Subject and purpose: running your website forms, your inbox, your booking calendar and your review requests, and nothing else.

Duration: as long as you have a plan with us, then until it is deleted as described under When you leave.

People: your customers and anyone who contacts you through your website.

Data: names, email addresses, phone numbers, street addresses, what they write to you, photos they upload, appointment times, the jobs you mark as done, and whether someone asked not to get review emails. Please don't ask for health details, Social Security numbers or card numbers in your forms.

03Your instructions

We use this data only to provide your website and dashboard, following this addendum, your settings and what you do in your dashboard. We don't sell or share it, don't use it for advertising, don't combine it with other data and don't use it to train AI.

If the law makes us do something else, we'll tell you first unless the law forbids it. We act as your service provider: we use the data only for the purposes above.

04Who can see it

Only Ruben and Sven, and only when needed to run or support your website, or when you ask. Both are bound to confidentiality.

05Security

All traffic is encrypted (HTTPS). Your data sits in a database in Frankfurt, Germany, locked per website: your dashboard login only reaches your own site. Photos sit in private storage. Our own access needs a password and a second code. Keys stay out of our code.

06Providers we use

You allow us to use these providers for this data. Each works under a written data protection agreement, and we stay responsible to you for them.

  • SupabaseDatabase, file storage and dashboard sign-inEU (Frankfurt, Germany)
  • Vercel Inc.Hosts your website and dashboardUnited States
  • Plus Five Five, Inc. (Resend)Sends the emails: new-message alerts, booking confirmations, review requestsUnited States
  • Google (Workspace)Our email inbox, where questions and requests about this data arriveUnited States

We'll email you at least 30 days before we add or replace one. If you object, tell us; if we can't solve it, you can cancel without extra cost.

07Data leaving the EU

Your data goes back to you in the United States when you use your dashboard, and three of the providers above are in the United States.

For data going back to you, the EU Standard Contractual Clauses, Module Four (processor to controller), adopted by Commission Decision (EU) 2021/914, are part of this addendum: you are the data importer, we are the data exporter, Dutch law applies to them, and the details under What we do with it and Security fill their annex.

For our providers we use the EU–U.S. Data Privacy Framework where they are certified and the Standard Contractual Clauses otherwise.

08Helping you

If a customer asks you to see, correct or delete their data, you can find and export their messages in your dashboard. To correct or delete a message, booking or review contact, email us at info@ruberio.com and we do it for you. If a customer contacts us directly, we pass it on to you.

If something goes wrong with your customers' data, we tell you without undue delay and within 48 hours of finding out, with what we know.

09When you leave

You can export your messages as a spreadsheet at any time.

While you're with us, messages and review requests are deleted automatically 24 months after they come in, and bookings 24 months after the appointment. The list of people who asked not to get your review emails stays as long as your website is with us, so they keep getting none.

After your plan ends we keep the data 90 days so you can still ask for it, then delete it. Deleted data can stay in our database provider's backups for a short time until those are replaced.

10Checks

We give you the information you need to see that we keep to this addendum, and we answer reasonable questions or audits by email at info@ruberio.com.

11Changes

We email you before a change takes effect. Questions: info@ruberio.com.