These terms form part of the PowerKit Pro terms of service and apply automatically to every business account. They cover the personal data of your own customers, visitors and staff that you put into PowerKit Pro or collect through it (for example check-ins, loyalty members, form and waiver responses, bookings and leads). For the data we hold about you as our customer, see the privacy policy.
Roles
You (the business) decide why and how your customers' data is used, so you are the controller. Balae Corporation processes it only on your behalf, so we are the processor. You are responsible for having a lawful basis and giving your customers any notice the law requires.
What we do with it
- We process it only to run the tools you use, on your instructions (your settings, and the actions you or your connected apps take), and as the law requires.
- We do not sell it, use it for advertising, or use it to train AI models.
- Everyone at Balae Corporation who can reach it is bound to keep it confidential.
Security
Data is encrypted in transit (HTTPS) and stored with our hosting provider in the United States. Passwords are hashed, access tokens are encrypted, and staff access is limited to support and security. If we learn of a breach affecting your customers' data we will tell you without undue delay, and within 72 hours where we can, with what we know.
Subprocessors
We use these services to run PowerKit Pro. Each is bound to protect the data and use it only for its job:
- Cloudflare: hosting, database and file storage (United States).
- Stripe: payments and invoices.
- Resend: sending email.
- Twilio: text messages, through your own Twilio account when you connect it.
- Google: sign-in, and the calendar and Places features you turn on.
We will update this list before adding a new subprocessor. If you object, email us and you may close your account.
Helping you
We help you answer your customers' requests to see, correct, export or delete their data, and with any security or privacy review the law requires of you. Most of it you can do yourself in the dashboard; for the rest, email support@powerkitpro.com.
Deletion
When you delete something, or close your account, we delete the related customer data within 30 days, except billing records the law requires us to keep.
International transfers
Data is processed in the United States. Where the law requires it for transfers from the EU, UK or Switzerland, the European Commission's Standard Contractual Clauses (and the UK addendum) apply between us and are incorporated by reference.
Audits
On reasonable written request, no more than once a year, we will answer your security questions and share the information you need to show these terms are being met.
Contact
Balae Corporation. support@powerkitpro.com.
See also the privacy policy.