Data Processing Terms

1. Subject and duration

We process personal data stored on the platform to provide the service for the duration of the agreement.

2. Instructions

We process data only on your documented instructions, which consist of the agreement and the platform settings.

3. Confidentiality and security

• access only for those who need it for their work
• role-based permissions and a trail of actions
• encrypted transfer and backups

4. Sub-processors

You give general authorisation to use sub-processors. We announce changes in advance, and you can object.

5. Assistance and breaches

We help respond to data subject requests and report personal data breaches without undue delay.

6. Return and deletion

When the agreement ends we return or delete the data within 60 days unless law requires retention.