Privacy policy

Who we are

DoneBro ("we", "us") provides operations, automation and engineering services to businesses. For personal data collected through this website we act as the data controller. When we process data on a client's behalf during an engagement, we act as a processor under a data processing agreement with that client.

What we collect

• Details you give us in the discovery form: name, work email, company, role, website, country and what you tell us about your work.
• Account details for people who sign in to our client portal or team hub: name, email, profile photo and activity within the service.
• Basic technical data needed to run and secure the site, such as IP address for rate-limiting abuse.

How we use it

• To reply to your enquiry and arrange a discovery call (legitimate interest / steps prior to a contract).
• To deliver services to clients and run the client portal (contract).
• To keep the service secure and prevent abuse (legitimate interest).

We don't sell personal data and we don't use it for third-party advertising.

Who we share it with

Service providers who host or operate our systems, such as Google Cloud and Firebase for hosting and authentication, under contracts that require them to protect it. Data may be processed outside your country; where required, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Enquiries that don't become engagements are deleted within 24 months. Client data is kept for the engagement and as required by law or contract afterwards.

Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, or object to how we use it. Email admin@done-bro.com and we'll respond within one month. You can also complain to your local data protection authority.

Security

Access is role-based and least-privilege. Client credentials are shared only through a password manager, never over email or chat.

Contact

Questions about this policy: admin@done-bro.com.