We are the controller for enquiries and account administration; for records in a customer’s account, the customer is controller and we are its processor. Contact: info@twassure.com.
When you register interest or email us, we use your name, company, email and message to reply and to set up a call. Our lawful basis is legitimate interests (answering your enquiry). We send product updates only if you ticked the box to say yes, and you can ask us to stop at any time. When you use the Register interest form, your enquiry is stored on our server (Supabase, EU) for 12 months, then deleted unless you become a customer. To stop the form being misused we also keep a scrambled (one-way hashed) copy of your email and internet address for the same period. If you email us instead, the email stays in our mailbox for 12 months. The form asks you to tick that you agree we may store your details to reply; we keep that tick with its date. Product updates are a separate box, unticked unless you choose them.
We do not use analytics or advertising cookies. The app uses your browser’s storage only for things that are strictly necessary: keeping you signed in, your Demo data, changes waiting to send when you are offline, and your settings.
In Demo mode everything you type or upload (items, names, letters, logos, photos, signatures) is saved only in this browser on this device. It is not sent to us. To open the demo you either give your name, company, role and work email, or type an access code we gave you. We store those sign-up details (or which code was used), with a one-way scrambled form of your IP address for abuse limits, on our server, so we can follow up about the demo and a pilot. Our lawful basis is your consent (the tick box); ask us at any time to delete them.
In Real mode your company’s records are stored on our server, hosted by Supabase in the EU (Ireland, eu-west-1). This includes: your name, work email and role; your competence record and expiry date; the projects and items you work on; everything you sign (who signed, when and in what role – this is your signature); inspections, faults, permits, photos and documents. Only people in your company can see it, and only for their projects and scope. The history cannot be changed or deleted by users, because it is a safety record.
Accounts are invite-only: your company’s DI adds you. Your password is stored only as a one-way hash by Supabase – we cannot see it. If you turn on 2-step sign-in, Supabase stores the key for your authenticator app. Invite, password-reset and sign-in emails are sent by Supabase through Resend.
Vercel, Supabase and Resend are US companies. Where personal data may be reached from or sent to the US, it is covered by the UK International Data Transfer Addendum (IDTA addendum) to their standard contract clauses, or by the UK–US data bridge.
Do not upload photos that show people who could be identified unless you have a reason and their knowledge.
Demo mode: go to Settings → Reset demo data, or clear this site’s data in your browser. Real mode: email info@twassure.com to see, correct or delete your personal data. Safety records may need to be kept for legal reasons; we will tell you if so. You can complain to the ICO (ico.org.uk).
Privacy · Terms · Licences · Front page