Privacy Policy

This notice describes data used to provide Instalatic. For privacy requests, contact [email protected].

Service provider

Instalatic is provided and supported by VP SOLUTIONS, MB. Registration code: 307570995. VAT: LT100020394010. Address: Vilkpėdės g. 22, LT-03151 Vilnius, Lithuania.

Data processed

Account names, email addresses, password hashes, company roles and preferences; client contact names, email addresses, phone numbers, addresses and notes; asset registration numbers, VINs and equipment identifiers; orders, schedules, checklists, photos, customer signatures and reports; session IP addresses and browser information; subscription and payment records, including Paddle events.

Photos and location

Photos can include capture time and coordinates read from EXIF. When capture coordinates are absent, the checklist can request the browser's location when a photo is uploaded. Photos and customer reports can contain personal data.

Purposes and responsibilities

Data is used to manage accounts, schedule and assign work, produce and share reports, send notifications, handle subscriptions and support, and protect the service. Companies also submit data about their clients and employees for processing as part of these activities.

For account, subscription and payment data, VP SOLUTIONS, MB decides how it is used. For the data a company enters about its clients, assets and employees, that company decides, and Instalatic processes it on the instructions of that company.

Hosting and external services

The main service is hosted by Hetzner in Germany. Backups are encrypted before they leave the server and are stored in the Netherlands with a different provider. Resend is used for email, Cloudflare for network protection and the anti-bot check, Sentry for error tracking, Telegram for connected notifications, and Paddle for payments. Map tiles are loaded from OpenStreetMap when a location is shown or picked.

Storage on your device

Instalatic sets no cookies of its own and uses no analytics or advertising trackers. Your browser keeps your sign-in keys, the account you are signed in as and your language choice; an engineer working offline also keeps assignments, photos and other changes waiting to be sent. All of it stays in your browser until you sign out or clear it. Cloudflare, which protects the service and runs the anti-bot check, and Paddle, which handles payment, may set their own cookies.

Install notes

Selected installation photos, equipment details and engineers' notes become Install notes: anonymous records of how equipment was fitted to a particular asset. Links to the company the work came from are dropped and photo EXIF is removed. That does not automatically remove personal information visible in a photo or written in a note, so an Instalatic administrator checks every record before anyone else sees it. Install notes are stored separately from the original orders.

Only work a company does with its own engineers feeds Install notes, and only photos from checklist steps marked for it. Collection is on by default and is switched off on request; from then on nothing new is taken. Records already made carry no link to the company, so they cannot be removed for one company in particular. Records checked and published by an Instalatic administrator are visible to engineers, dispatchers and admins of companies that have Install notes switched on.

Export and deletion

The service has account and company export and deletion procedures. Account deletion clears selected profile fields while work history can remain. Company deletion is a separate procedure; employees retain their own accounts. Cancelling a subscription is not itself a request to erase data.

While an account exists, its data is kept. Deleting an account starts a 30-day period during which it can still be restored; after that the profile is anonymised, while work history and invoices remain, because they belong to the company and to its bookkeeping. An export can be requested once every 24 hours and the prepared file stays available for 7 days. Backups are encrypted before they leave the server; copies kept on the server itself are removed after 2 days.

Privacy requests

For access, correction, deletion, export or other questions about your data, contact [email protected].

Write to [email protected]. We answer within one month, as the General Data Protection Regulation requires. If your data was entered into Instalatic by a company, we pass the request on to that company, because it decides what happens to it. A complaint can be filed with the Lithuanian supervisory authority, the State Data Protection Inspectorate.