Legal
Data processing terms
Last updated 28 October 2026. A plain-language summary; a signed agreement is available on request.
1. When these terms apply
When a business uses Beaquaro Business or Studio and puts personal data of other people into it (for example the people who comment or message its accounts), the business decides why and how that data is used and Beaquaro handles it on the business’s instructions. In that case the business is the controller and Beaquaro is the processor. For the personal data of the people who use Beaquaro themselves, Beaquaro is the controller: that is covered by the privacy policy.
2. What we do with it
We process the data only to provide the service the business has chosen (storing it, showing it, sending the replies and messages the business sets up, and producing the numbers it asks for), and to keep the service secure. We do not sell it, use it to advertise to those people, or use it to train models.
3. Our promises
We act only on the business’s documented instructions, which include using the service. People who can reach the data are bound to keep it confidential. We keep it secure: sign-in tokens are encrypted, access is limited, and everything travels over encrypted connections. We help the business answer requests from the people the data is about, and tell the business without undue delay if we learn of a breach affecting its data. We delete or return the data when the business ends its account (see Download my data and Delete my account in My Beaquaro), unless the law requires us to keep it.
4. Sub-processors and transfers
The business agrees that we may use the sub-processors on our sub-processors page, and we will update that page before adding or changing one in a way that matters. Where data goes outside the UK or EU, we rely on the transfer protections our providers offer, such as standard contractual clauses.
5. Audits and questions
We will answer reasonable questions about how we protect the data, and give the information needed to show we keep to these terms.
6. A signed copy
If your organisation needs a signed data processing agreement, write to privacy@beaquaro.com with the name of the company and who signs, and we will send one.
See also the sub-processors and the privacy policy.