Data Processing Agreement
Processing purposes
Providing, operating, monitoring and supporting the Ultimate BMS software on your dedicated instance.
Categories of data
Account and user data you provide; business data you enter into the product (stored only on your isolated instance); aggregate operational telemetry (see below).
Sub-processors
See the published sub-processor list, kept current and notified in advance for annual/enterprise contracts.
Telemetry disclosure (verbatim, per §8)
“Aggregates and counts only — never raw records. No work order contents, no customer names, no sensor readings.” Retention: 7 days raw, 90 days hourly rollups, 13 months daily rollups.
Retention
Active subscription: for the life of the contract. Cancelled: 6-month cold storage, then permanent deletion with three prior notification emails (day 150, 170, 179).
Breach notification
72 hours to the relevant regulator; without undue delay to affected customers.
Deletion on termination
The COLD_STORAGE → DELETED path, executed early on written request within 30 days.
International transfers
Standard Contractual Clauses apply — our operating entity is South African, processing occurs in the EU (Ireland).