ES · EN ← Back to the app

Draft. Under legal review (especially Annex I). Operator: FOXIT SOL SRL (Romania). Last updated: 2026-08-07.

Terms of Use

By creating an account and using DuctFlow, you accept these Terms, including Annex I (Data Processing), and the Privacy Policy.

1. Purpose

DuctFlow (https://ductflow.app) is a web app to calculate HVAC ductwork m², manage projects and generate quotes, operated by FOXIT SOL SRL, CUI 55024880, VAT (VIES) RO55348046 (Trade Register J2026041641000), address Voiteg, no. 141/A, 307470, Timiș county, Romania.

2. Account and acceptable use

You must provide accurate data, safeguard your credentials and use the service lawfully. You are responsible for activity on your account. Access is for professional use.

3. Data you enter

You are the controller of your clients' personal data that you enter, and you warrant that you have a legal basis to process it and to inform your clients. We process it as processor under Annex I. You keep ownership of your data and may export or delete it at any time.

4. Availability and warranty

The service is provided «as is», with reasonable efforts to keep it available, but without guaranteeing it is uninterrupted or error-free. We recommend keeping backups (export function available). Calculations and quotes are a support tool; final validation rests with the professional user.

5. Limitation of liability

To the extent permitted by law, we are not liable for indirect damages or data loss arising from the use or inability to use the service.

6. Prices and subscription

DuctFlow is offered by subscription (monthly or annual) in three plans — Base, Pro and Full — whose current prices and features are published at https://ductflow.app. Payment is made in advance by card; the subscription renews automatically unless cancelled. You may cancel at any time and keep access until the end of the period already paid; started periods are non-refundable except as required by law. During the beta phase, access may be offered free of charge or by invitation. Prices are stated excluding VAT unless otherwise indicated.

7. Term and termination

You may close your account at any time. We may suspend accounts that breach these Terms. On closure, your data is handled per the Privacy Policy and Annex I.

8. Data protection

Data processing is governed by the Privacy Policy and, for the data you enter about your clients, by Annex I (Data Processing Agreement).

9. Governing law and jurisdiction

Governed by Romanian law and EU law, respecting the mandatory consumer rights of the user's country of residence. Any dispute shall be subject to the courts of the operator's seat in Romania, without prejudice to the forum available to the consumer under applicable law.

10. Contact

support@ductflow.app

Annex I — Data Processing Agreement (Art. 28 GDPR)

This Annex is part of the Terms and is accepted on account creation. It governs the processing of the personal data that you (Controller) enter about your clients, which DuctFlow (Processor) processes on your behalf.

A.1. Subject matter and duration. DuctFlow processes personal data on your behalf only to provide the service (calculation, projects, quotes). Duration = that of the account.

A.2. Data and data subjects. Identifying and contact data of your end clients (name, tax ID, address, phone, email) and project, piece, sketch and quote data. If you enable employee time tracking: working-time and geolocation data (when clocking in and out) of your employees. Data subjects: your clients, contacts and, where applicable, your employees. No special categories (Art. 9) are processed.

A.3. Processor obligations (Art. 28.3). DuctFlow undertakes to:

  1. Process the data only on your documented instructions (these Terms and use of the app).
  2. Ensure the confidentiality of authorised personnel.
  3. Apply the security measures of Art. 32 (A.5).
  4. Respect the conditions for sub-processors (A.4).
  5. Assist you in responding to data-subject rights requests.
  6. Assist you in complying with Arts. 32–36 (security, breaches, impact assessments).
  7. At your choice, delete or return the data at the end of the service, unless legally required to retain it.
  8. Make available the information to demonstrate compliance and allow reasonable audits.
  9. Notify you without undue delay of any security breach it becomes aware of.

A.4. Sub-processors. You give general authorisation for the use of sub-processors. Currently: Supabase, Inc. (database/storage, EU region — Stockholm), Cloudflare, Inc. (hosting/CDN) and Zoho Corporation (domain email). DuctFlow will notify additions or changes with reasonable notice and you may object on justified grounds; it will impose equivalent obligations on each sub-processor.

A.5. Security (Art. 32). Encryption in transit (TLS) and at rest; logical per-customer isolation (every query is scoped by company at the application layer, with server-side ownership checks); role-based access control; backups; access logging. The public tracking link shows only progress and price, never costs or margins.

A.6. Transfers. Data is hosted in the EU (Stockholm, eu-north-1). Any transfer outside the EEA is covered by Standard Contractual Clauses and supplementary measures.

A.7. Precedence. On data-protection matters, this Annex prevails over the rest of the Terms.