GDPR
This page supplements our Privacy Policy for people in the European Economic Area, the United Kingdom and Switzerland, whose personal data is protected by the General Data Protection Regulation (“GDPR”), the UK GDPR and the Swiss Federal Act on Data Protection.
Our role
- Controller: TM Takeoff LLC is the controller for personal data we collect through our website, demo requests, account registration, billing and marketing.
- Processor: for personal data contained in documents our customers upload (Customer Content), the customer is the controller, and TM Takeoff processes that data on its behalf under our Data Processing Agreement.
Lawful bases for processing
| Purpose | Lawful basis |
|---|---|
| Providing the Service, managing accounts and billing | Performance of a contract (Art. 6(1)(b)) |
| Responding to demo and support requests | Steps at your request before a contract; legitimate interests (Art. 6(1)(b), (f)) |
| Security, fraud prevention and service improvement | Legitimate interests (Art. 6(1)(f)) |
| Optional cookies (preferences, analytics) and marketing emails | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Tax, accounting and other legal requirements | Legal obligation (Art. 6(1)(c)) |
Your rights
Under the GDPR you have the right to:
- Access your personal data and receive a copy;
- Rectify inaccurate or incomplete data;
- Erase your data (“right to be forgotten”);
- Restrict processing in certain circumstances;
- Data portability: receive your data in a structured, machine-readable format;
- Object to processing based on legitimate interests, and to direct marketing at any time;
- Withdraw consent at any time, without affecting earlier processing;
- not be subject to decisions based solely on automated processing that have legal or similarly significant effects. TM Takeoff does not make such decisions about individuals.
How to exercise them: email support@tmtakeoff.com. We will respond within one month, which may be extended by two months for complex requests, and may need to verify your identity. If your data is in Customer Content uploaded by your employer or a business partner, we will forward your request to that customer, as the controller.
You can also change your cookie choices at any time with the button.
International transfers
TM Takeoff is based in the United States, and data is processed there. Transfers of personal data from the EEA, UK and Switzerland are protected by the European Commission’s Standard Contractual Clauses, with the UK Addendum and Swiss amendments where required, as set out in our DPA, together with the security measures described on our Security page.
Retention
We keep personal data only as long as needed for the purposes above: account data while your account is active, and Customer Content for 30 days after your subscription ends for export, then deleted from active systems within 90 days. Some records, such as invoices, are kept longer where the law requires.
Subprocessors
We use carefully selected subprocessors for hosting, AI processing, email delivery, payments and support. Each is bound by data-protection terms. The current list is available on request at support@tmtakeoff.com.
Complaints
If you have a concern, please contact us first at support@tmtakeoff.com so we can try to resolve it. You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work, or where an alleged infringement took place. In the UK, that is the Information Commissioner’s Office (ICO).
Contact
TM Takeoff LLC · support@tmtakeoff.com