Privacy Policy

The data controller is Inspeqto (the operator of the service). For any privacy question, contact us at comercial@inspeqto.com.

Account data: name, email address, password (stored only in encrypted form), role within the organisation and preferred language.

Inspection data: information entered by users in the course of their work — clients and their addresses/sites, inspected items, photographs and videos, observations, signatures (inspector and client) and the generated reports.

Technical data: access logs required for the security of the service and strictly necessary session cookies (authentication). We use no advertising cookies and no third-party trackers.

Providing the service — accounts, inspections and reports (performance of a contract, Art. 6(1)(b) GDPR).

Service security and abuse prevention (legitimate interest, Art. 6(1)(f)).

Operational communications, such as team invitations and service notices (performance of a contract).

Compliance with legal obligations, in particular tax and accounting requirements, where applicable (Art. 6(1)(c)).

We use providers that process data on our behalf under data processing agreements: Supabase (database, authentication and file storage), Vercel (application hosting) and Render (transient conversion of reports to PDF — the document is processed and not retained).

We aim to keep processing within the European Economic Area; where a provider processes data outside the EEA, that processing relies on appropriate safeguards such as the European Commission’s standard contractual clauses.

Account data: for as long as the account exists.

Inspection data: it belongs to the client organisation and is kept for as long as that organisation retains it; it can be deleted in the application or on request.

After an account or organisation is deleted, data is removed within a reasonable period; backups expire by rotation.

Under the GDPR (and, in the United Kingdom, the UK GDPR) you have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise any right, write to comercial@inspeqto.com.

You also have the right to lodge a complaint with a supervisory authority — in the United Kingdom, the ICO (www.ico.org.uk); in Ireland, the DPC (www.dataprotection.ie).

Connections are encrypted (TLS), access is role-based and each organisation’s data is isolated at database level (row-level security). No system is completely secure; in the event of a data breach posing a risk to individuals, we will notify as required by law.

The service is intended for professional users and is not directed at anyone under 16.

Any change to this policy is published on this page. Material changes will be communicated in the application.