Privacy
Updated October 2026.
What we store
Your account details, meaning your name and email address, and whatever you enter yourself: customers, jobs, notes, photos and documents.
What we use it for
Only to run the product. We do not sell your data and we do not use it for advertising.
Who can see it
Your workshop. Every record belongs to your workshop and is not visible to other users.
Where it is stored
On Cloudflare infrastructure, which we use for the server, the database and file storage.
Reading photos and bills of quantities
When the app reads a photo of a list or a bill of quantities, we send the photo, or the text of the bill, to Anthropic, which provides the model that reads it. For a bill of quantities, TypeSafe first checks each page for items, so that only those pages are read. We do not keep the photo or the PDF, only the lines that were read.
Assistants (ChatGPT, Claude)
You can connect Paca to your own assistant, such as ChatGPT or Claude. You set up the connection yourself, by signing in and confirming, and you can end it at any time in Paca's settings. Through it, the assistant reads and writes your workshop's data with the same rights you have, and no more. It cannot see photos or documents through the connection. What the assistant reads is processed by the assistant's provider, such as OpenAI or Anthropic, under its own terms. Paca keeps a record of who connected which assistant, when and with which rights, and a list of the actions the assistant took. We keep that list for 180 days. Through Paca, an assistant cannot send messages to customers, issue invoices or delete data.
Enquiries from the website form
If a workshop uses the Paca form on its website, an enquiry is stored in the workshop's app: name, phone, email, address and message. To limit abuse we also store a hashed value of the sender's IP address, from which the address cannot be read, and delete it after one day. An enquiry is deleted a year after it arrives. If the workshop turned it into a customer, the details stay with the customer.
Deleting a customer
A workshop can permanently delete a customer: contact details, notes, jobs, log entries, photos, quotes, enquiries and draft invoices. The deletion is permanent. Only issued invoices remain, because the law requires keeping them for ten years; they keep what was printed on them, and the customer is recorded in the app as "Izbrisana stranka" (deleted customer).
Your rights
You can access your data, correct it or ask us to delete it. Write to support@pacahq.com.
Deleting your account
You delete your account yourself in the app, under Settings > Account (the app is in Slovenian: Nastavitve > Račun). It asks you to confirm first. What gets deleted depends on whether you work alone or with colleagues. If you would rather not do it in the app, write to support@pacahq.com and we will do it for you.
What happens to your data when you delete
If you are the only person in the workshop, deleting your account deletes the whole workshop and everything in it: customers, jobs, notes, photos, quotes and the materials catalogue. That is permanent and cannot be undone, and the photos are removed from storage too. If you are in a workshop with colleagues, we erase your personal data, meaning your name, your email address and your sign-in credentials, and we remove you from the team, but the workshop's own records stay with the workshop. Work you logged stays part of its history, without your name on it. That is deliberate: those records belong to the business, and one person leaving must not erase a colleague's job history.
Owners with colleagues in the team
If you own the workshop and there are still other members in it, you cannot delete your account outright. Remove the other members first, then delete your account. That way a workshop is never left without an owner.
Measuring visits
We count page views on this site with analytics that sets no cookies and does not follow individuals between websites. We see how many views a page had, where the visitor arrived from, and which country and browser they used, but not who they are. The data stays with the same provider that hosts this site.