/ Legal

Data Processing Agreement

Last updated: July 14, 2025

1. Purpose

This Data Processing Agreement ("DPA") forms part of the Terms of Service and governs the processing of personal data subject to GDPR and other applicable data protection laws.

2. Roles

You (the "Controller") determine the purposes and means of processing personal data. We (the "Processor") process personal data on your behalf in providing our services.

3. Processing details

We process personal data only on your documented instructions. We do not process personal data for our own purposes except as required to provide and maintain the services. Processing scope: providing SaaS solutions, authentication, analytics, and support.

4. Security measures

We implement appropriate technical and organizational measures including: AES-256 encryption at rest, TLS 1.3 in transit, role-based access control, immutable audit logs, regular security assessments, and staff training on data protection.

5. Sub-processors

We use the following sub-processors: cloud hosting (AWS, GCP, Azure), email delivery (Resend), analytics (PostHog). We notify you before engaging new sub-processors. A current list is available on request.

6. Data subject rights

We assist you in responding to data subject requests (access, correction, deletion, portability). We notify you promptly if we receive a request directly from a data subject.

7. Breach notification

We notify you of any personal data breach within 72 hours of becoming aware of it. Notification includes the nature of the breach, likely consequences, and measures taken to address it.

8. Data return and deletion

Upon termination, we return or delete your personal data within 30 days, unless legally required to retain it longer. Audit logs may be retained for 7 years for compliance purposes.

9. Audits

We maintain documentation of our security practices and make it available for your compliance audits. On-site audits are available for enterprise customers with appropriate notice.

10. Contact

For DPA questions, email us at contact@internetcompany.tech.