// legal / dpa
Datakunata Ruray Yapay
qhipa musuqchasqa · 2026-05-07
// scope
Kay Yapayqa EGO HERO LLC (“FixVibe”, “Processor”)wan Customer (“Controller”)wan ruwasqa Terms of Service ukhunmi, hinaspa FixVibe Service quyta ruwaspa Customer sut'inpi Personal Data ruraptinmi llamk'an. Service llamk'achispa, Customer kay Yapayta chaskin.
1. Simikuna ima ninan
Kaypi mana sut'inchasqa hatun qillqayuq termsqa GDPR (Regulation (EU) 2016/679) nisqapi qusqa ninayuqmi; chaymanta, maypi ruwakun chaypi UK GDPR / Data Protection Act 2018, California Consumer Privacy Act CPRAwan allichasqa (“CCPA”), hinallataq huk suyukunapa rikch'aq kamachikuyninkuna.
“Personal Data” nisqaqa Customer apachisqan utaq Service paqarichisqan data, riqsisqa utaq riqsiy atina runata riqsichiq utaq paywan tupaq. “Sub-processor” nisqaqa kimsa kaq pihak, FixVibe sut'inpi Personal Data ruraypaq FixVibe churakusqan — /legal/privacy nisqapi listapi kachkan.
2. Ruwaykuna hinallataq kamachiykuna
Sapa pihakqa payman chayaq Data Protection Laws hunt'aymanta sapallan responsablemi. Customerqa Controller, FixVibeqa kay Yapay ukhupi ruwasqa Personal Data paq Processor. FixVibeqa Personal Data Customerpa documentasqa kamachiyllanman hina ruranqa (Service configuration chay kamachiy hina), kamachikuy mana hukta mañaptinqa.
3. Pakasqa kay hinallataq yaykuy
FixVibeqa Personal Data ruraq autorizasqa personal pakasqa kay obligationswan watasqa kasqankuta qhawan. Production data yaykuyqa operations staffpa least-privilege huch'uy huñullanmanmi sayachisqa, audit_logs nisqapi qillqasqa, hinaspa pacha pachapi qhawasqa. FixVibe llamk'aqkuna Customer data manam yaykunkuchu, support tickets tapuy, security incidents kutichiy, utaq legal process hunt'aypaqlla.
4. Seguridad medidas
FixVibeqa GDPR Art. 32 nisqawan tinkuq technical hinallataq organisational measures churakun, kaykunawan:
- Personal Data encryption transitpi (TLS 1.2+) hinallataq at restpi (database disk-level + authenticated-scan headers hinallataq OAuth tokenspaq targeted column-level AES-256-GCM);
- sapa database tablepi row-level security kallpachay — application code pantaspa ima mana organisation boundaries chimpayta atinchu read/write ruwanapaq;
- Customer social sign-in akllaptin upstream OAuth provider (Google utaq GitHub) nisqawan per-user multi-factor authentication;
- FixVibe codebase kikinpi continuous static analysis + dependency vulnerability scanning;
- database providerwan backups point-in-time recoverywan; watapi huk kuti yachasqa;
- defined retention periods (Privacy Policy qhaway) automated daily cronwan hunt'achisqa, mana papel promise sapallanchu.
5. Sub-processors
Customerqa FixVibe nisqata Privacy Policy nisqapi listapi kaq Sub-processors chaypi nisqa propósitospaq llamk'achiyta autoriza. FixVibe sapa Sub-processorwan qillqasqa contract ruwan, chayqa kay Yapaypi kaqkunamanta aswan pisichu data-protection obligations churan, hinaspa Personal Data processingmanta Sub-processorpa ruwayninmanta pantayninmantapas Customerman responsable kachkan.
FixVibeqa Sub-processors musuq yapayta utaq reemplazota munasqanmanta Customerman (in-app notice utaq email) mana pisichu 30 p'unchaw ñawpaqta willanqa, Customer object kananpaq. Customer reasonable data-protection grounds nisqapi object kaptin, Customerqa chay affected processingmanta Service terminate ruwayta atin.
6. Internacional transferencias
FixVibeqa Personal Data aswanqa United States ukhupi ruran. Personal Data EEA, UK, utaq Switzerlandmanta adequacy decision mana chaskisqa third countryman transfer kaptinqa, FixVibe kaykunapi hap'ikun:
- European Commission's Standard Contractual Clauses (Decision (EU) 2021/914), Module 2 (controller-to-processor), kay Yapayman referencewan churasqa;
- UK's International Data Transfer Addendum to the EU SCCs (utaq IDTA standalone), ICOpa willasqanman hina;
- Section 4 nisqapi willasqa supplementary technical and organisational measures.
Customerqa FixVibe nisqata Customer sut'inpi sapa onward Sub-processorwan SCCs / IDTA ruwananta autoriza.
7. Data subject derechokuna
FixVibeqa Customer yanapanqa (processingpa kaynin hinallataq willakuy kachkan chayta qhawarispa) Articles 15–22 GDPR ukhupi data subject requests kutichinapaq. Aswan derechosqa Account → Privacy nisqamanta self-serve; puchuq requestspaq Customer support@fixvibe.app man “Privacy request” subjectwan emailta apachiyta atin. 30 p'unchaw ukhupi kutichiyku.
8. Personal data breach
FixVibeqa Customer Personal Data afectaq Personal Data breach yachaspa mana mana allin qhipakuywan (ima kaptinpas 72 horas ukhupi) Customerman willanqa, Customer Article 33 / 34 obligations hunt'anapaq razonablemente mañakusqan willakuyta quspa: breachpa kaynin, data subjects hinallataq records categorías hinaspa aproximado yupaynin, probable consecuencias, hinallataq allichanapaq taken or proposed measures.
9. Audits
FixVibeqa Customerman kay Yapayta hunt'asqanta rikuchinapaq necesario willakuyta disponible ruwan: kay document, Privacy Policy, Acceptable Use Policy, Terms, hinallataq mayqan third-party security reports hap'isqayku (mañakuspa NDA ukhupi compartir ruwasaqku). FixVibeqa audits, including inspections, Customer utaq Customerpa mandasqan auditor ruwasqanman haykuyninta yanapayta qunqa, reasonable advance noticewan hinaspa business hours ukhupi, calendar yearpi huk kutimanta aswan manam (regulator hukta mañaptin utaq Personal Data breach kaptinqa mana).
10. Pichay utaq kutichiy
Service tukukapti, Customerpa akllayninman hina, FixVibeqa Customer sut'inpi ruwasqa Personal Data llapanta 30 p'unchaw ukhupi pichanqa utaq kutichinqa, applicable law retain ruwananta mañaptinlla (e.g. tax / billing records). Account → Privacy nisqapi self-serve account deletion flow chayta chaylla trigger ruwan.
11. CCPA yapay (California)
CCPApa propósitospaq, FixVibeqa kay Yapay ukhupi ruwasqa Personal Information nisqapaq “Service Provider”, Customerqa “Business”. FixVibe manam ruwanqachu:
- Personal Information sell utaq share (CCPA ukhupi chay terms imayna definisqa chayman hina);
- Service quy business purpose específico mana kaqtinqa Personal Information retain, use, utaq disclose ruwakuy, FixVibe Customerwan direct business relationship hawapi ima;
- CCPA explicitamente permite mana kaptinqa Customer manta chaskisqa Personal Information huk source manta chaskisqa Personal Informationwan combine ruwakuy.
FixVibeqa kay restrictions entiendesqanta hinaspa hunt'ananta certifica.
12. Ñawpaq kaypa orden
Kay Yapaywan Terms of Servicewan conflict kaptinqa, conflictpa tupunman hina kay Yapay prevail ruwan. SCCs / IDTA applikaptinqa iskayninmanta aswan prevail ruwan.
13. Contacto
Llapan data-protection matters, data subject rights ejerciciowan hinallataq Sub-processors tapuykunawan, EGO HERO LLCwan contactokuy:
- email: support@fixvibe.app (routingpaq subject line “DPA” llamk'achiy)
- postal: hawapi emailwan mañakuspa address disponible
