This agreement applies when a community uses Steady to process personal data about its members, donors, beneficiaries or volunteers. It sits between the community ("you", the controller) andUnity Space SLU, Calle Lirica 9, Spain ("we", "us", the processor), and covers the processing described below.
1. Scope and instructions
We process personal data only to provide the service, on your documented instructions, and for the purposes set out in the privacy policy. We do not use community data for our own purposes, sell it, or share it with third parties beyond thesubprocessors listed.
2. What is processed
- Data subjects — your members, staff, volunteers, donors and the people recorded in cases or programs.
- Categories — identification and contact details, membership and role, donations and payments references, case and program notes, event participation, uploaded documents.
- Special categories — a community may record health or social circumstances in cases. You are responsible for having a lawful basis for that; we protect it with the same technical measures as the rest of the tenant data.
3. Security
Tenant isolation is enforced at the database level with row-level security keyed on the community, in addition to application-level permission checks. Data is encrypted in transit, access to production is limited and logged, and credentials are stored as hashes. We test the isolation rules as part of the release process.
4. Subprocessors
You authorise the subprocessors on the subprocessors page. We give notice before adding one that processes community data, and the same data protection obligations flow down to them.
5. Assistance and rights
We help you answer access, correction, deletion and portability requests through the product's export and deletion features, and by hand where the product does not cover a case. We notify you without undue delay if we become aware of a personal data breach affecting your data.
6. Deletion and return
On termination you can export your data. After a short grace period we delete it, and it leaves backups on the normal rotation. Billing records are kept where tax law requires.
7. Audits and contact
We answer reasonable security questionnaires and audit requests. Contactlegal@getsteady.cc, or Unity Space SLU, Calle Lirica 9, Spain.