Lugvento Data Processing Addendum
Last updated November 6, 2026.
This Addendum is part of the Lugvento Terms of Service. It applies when Lugvento LLC ("Lugvento") handles personal information in Shop Data on behalf of the Shop. Words defined in the Terms mean the same here.
1. Roles
The Shop decides why and how personal information in Shop Data is used, and is the controller (or business). Lugvento handles it on the Shop's behalf, and is the processor (or service provider). These words have the meanings given by US state privacy laws, including the Connecticut Data Privacy Act, where those laws apply.
2. What is handled
- Purpose: providing, securing and supporting the Service, and sending the messages the Shop asks for.
- Length: the term of the Terms, plus the export and deletion period in section 12.3 of the Terms.
- People: the Shop's customers and its staff.
- Information: names, contact details, addresses, vehicle and repair records, estimates, invoices and payment records, photos, typed names and signatures, appointment requests, staff time records and certificates.
The Shop will not put sensitive information in the Service beyond what the Service asks for, and will not put payment card numbers, Social Security or driver's license numbers, or health information in notes, photos or other free-text fields.
3. Lugvento's commitments
Lugvento will:
(a) handle this information only to provide the Service, on the Shop's documented instructions, which are the Terms, this Addendum and the Shop's use of the Service;
(b) not sell it, or share it for advertising;
(c) not combine it with information from other sources or use it outside the direct relationship with the Shop, except as the law allows;
(d) limit access to people who need it, and require them to keep it confidential;
(e) tell the Shop if it believes an instruction breaks the law, or if it can no longer meet its obligations under privacy law; and
(f) delete it at the end, as section 10 describes.
4. The Shop's commitments
The Shop confirms that it has the right to give Lugvento this information, that it has given the notices and obtained the consents it needs (including for emails, texts, saved cards and electronic signatures), and that it will keep its own account and staff access up to date.
5. Security
Lugvento keeps reasonable technical and organizational safeguards: encryption in transit and at rest; separation of each Shop's data by database rules, checked by automated tests; access by role; one device per login, optional two-step sign-in and idle sign-out; expiring links for photos and documents; daily backups; and a record of who changed what.
6. Service providers
The Shop allows Lugvento to use the service providers listed in the Privacy Policy. Lugvento binds each to written terms that protect the information, and remains responsible for their work. Lugvento will give at least 30 days' notice by email before adding or replacing a provider that handles Shop Data. If the Shop has a reasonable objection that can't be resolved, the Shop may cancel, with a refund of prepaid fees for the unused period.
7. Helping the Shop
The Shop can see, correct, export and hide most information itself in the Service. Lugvento will give reasonable help with requests from individuals, and with data protection assessments the law requires. If a person contacts Lugvento directly about Shop Data, Lugvento will pass the request to the Shop and won't answer it itself unless the law requires or the Shop asks.
8. Security incidents
If Lugvento confirms that Shop Data was accessed, lost or disclosed without authorization, it will tell the Shop without undue delay and within 72 hours of confirming it, with what happened, what information was involved, and what Lugvento is doing. The Shop is responsible for notices to its customers, staff or regulators, and Lugvento will give reasonable help.
9. Records and audits
On reasonable written request, and at most once a year, Lugvento will give the Shop the information needed to show it is meeting this Addendum. If the law requires more, the parties will agree a reasonable process at the Shop's expense.
10. Deleting information
When the Terms end, Lugvento deletes Shop Data as section 12.3 of the Terms sets out, unless the law requires it to be kept. Records a Shop hides in the app during the term are kept for the Shop's history and offline work, and are deleted with the rest.
11. Where information is handled
Lugvento stores this information in the United States.
12. Order of documents
If this Addendum conflicts with the Terms about personal information, this Addendum controls. The Terms' limit of liability applies to this Addendum.