GDPR — how TinyOrange handles personal data
How TinyOrange handles personal data, in one screen.
Who we are
TinyOrange is Edd Smith, trading as TinyOrange, in the UK. For anything about your data: tinyorange.cloud@gmail.com.
What we hold and why
Only what the apps need to do their job. Your name and email address, from your Google account, to sign you in. Whatever you and your business enter into an app to use it — jobs, checks, hours, invoices, books, notices, photographs. Nothing else, and nothing bought in.
Whose data it is
If you run a business on our apps, anything your team enters about your customers is yours. You decide what goes in and who in your business sees it; we keep it, and look at it only to support you, fix problems or keep the service running. In GDPR terms you are the controller of that data and we are the processor. Your own account details (name, email) we hold as controller.
Where it is kept
In Google's cloud, in London. Our apps are built on Google Firebase; the database and your files live in Google's London region. Some things run outside the UK: Vivian's web server in Google's US region, which keeps nothing itself; a small live feed of upload progress and app health counts in Google's Belgium region, which carries no personal data beyond an account id; and, for Eddy only, Anthropic in the US, who write a reply when Eddy's own rules cannot answer a visitor's question, and Resend in the US, who deliver our emails to a business about its Eddy account. Google, Anthropic and Resend are processors for us under their data-processing terms, which cover sending data from the UK to the US. Anthropic do not use what they are sent to train their models.
Who can see it
The people your business has added, with the role you gave them. TinyOrange staff (Edd) can read a business's data, only to support it, fix problems or keep the service running, and can create and suspend a business's account.
What we never do
Sell it. Use it for advertising. Email your customers. Train anything on it. Share it with anyone except the processors named above: Google, who host it, and for Eddy, Anthropic and Resend.
How long we keep it
For as long as your account is active. Close your account, or ask, and it is deleted. If a free trial ends and you do not subscribe, or you cancel a paid plan, the app turns read-only — still there to read and to copy. While your business uses another TinyOrange app nothing is deleted. Once none is left, we email you a download of everything at 30, 45 and 60 days, and it is deleted a week after the last one (Vivian galleries are never deleted: see the terms). Backups: a copy of the database is taken every night, and deleted files stay recoverable, for 30 days, in London. So anything deleted is gone from the apps at once and from the backups within 30 days.
Your rights
You can ask to see what we hold about you, have it corrected, have it deleted, or have a copy to take elsewhere. Email us and it happens. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
If something goes wrong
If we ever learn that your data has been exposed we will tell you, and the ICO where the law requires, within 72 hours.
Last updated 4 November 2026.