Effective September 27, 2026. This Addendum forms part of the SaaS Terms of Service. “Customer” means the subscribing business; “Customer Personal Data” means personal information submitted to the service and processed for Customer.
1. Roles and instructions
Customer is the business, controller or equivalent party that determines the purpose of processing. BuildVecta acts as a service provider, contractor or processor for Customer Personal Data, except where BuildVecta independently processes account, billing, security or legal-compliance information as described in the Privacy Policy. BuildVecta will process Customer Personal Data only to provide and secure the service, comply with documented instructions, or meet legal obligations.
2. Customer obligations
Customer will provide lawful instructions, notices and consents; limit collection to appropriate information; respond to individuals; and ensure its use of the service complies with privacy, employment, communications and construction laws. Customer will not instruct BuildVecta to process data unlawfully.
3. Confidentiality and security
BuildVecta limits access to personnel and providers who need it and are bound by confidentiality duties. BuildVecta maintains reasonable administrative, technical and organizational safeguards appropriate to the nature of the service, including access controls, encrypted connection tokens, logging and measures intended to protect against unauthorized access, alteration, loss or disclosure.
4. Subprocessors
Customer generally authorizes BuildVecta to use hosting, authentication, storage, email, payment, communications, analytics and automated-processing providers necessary to operate the service. BuildVecta remains responsible for requiring subprocessors that process Customer Personal Data to provide protections appropriate to their role. Material new processing categories will be disclosed through updated service documentation or notice when required.
5. Individual requests
Taking into account the nature of processing, BuildVecta will provide reasonable assistance for verified access, correction, deletion, portability or objection requests relating to Customer Personal Data. If BuildVecta receives a request concerning data controlled by Customer, BuildVecta may direct the requester to Customer unless prohibited by law.
6. Security incidents
BuildVecta will notify Customer without unreasonable delay after confirming a breach of Customer Personal Data that legally requires notice. Notice will include available information reasonably needed for Customer to meet its obligations. Notice is not an admission of fault. Customer is responsible for notices concerning its own systems, users and instructions.
7. Return and deletion
During an active account, Customer may use available export and deletion controls. After termination or a verified request, BuildVecta will delete or de-identify active-system Customer Personal Data according to the Privacy Policy, unless retention is legally required. Backup data is protected and expires through ordinary cycles.
8. Compliance information
On reasonable written request, BuildVecta will provide information reasonably necessary to demonstrate compliance with this Addendum. Any audit must protect other customers, security information and confidentiality, occur no more than annually unless required after a confirmed incident, and avoid unreasonable disruption or expense.
9. International transfers
Customer Personal Data may be processed in the United States and other locations used by approved providers. Where legally required, the parties will use an appropriate transfer mechanism. Customers requiring jurisdiction-specific transfer terms should contact BuildVecta before submitting regulated data.
10. Contact and conflict
Data-protection questions may be sent to help@buildvecta.com. If this Addendum conflicts with the Terms regarding processing of Customer Personal Data, this Addendum controls for that subject.