Data processing agreement

Datapipe is the product. The company offering it is PLACEHOLDER: legal entity name, PLACEHOLDER: postal address. Write to legal@trydatapipe.com, privacy@trydatapipe.com, or support@trydatapipe.com.

This DPA applies when PLACEHOLDER: legal entity name processes personal data for a customer who is the controller. The customer decides which sources to connect. We process that data to pull reports, store history, and export it as the customer asks.

Instructions

We process data only to provide Datapipe, to secure it, and to meet the law. We do not sell it and we do not use Google user data outside the Limited Use rules in the privacy policy.

Security and subprocessors

Tokens are encrypted at rest. History is separated by workspace. Subprocessors are listed on the subprocessors page. We will tell customers before we add a subprocessor that changes the kind of processing.

Deletion

Free history is deleted after 90 days. Paid history stays while the subscription is active. Data Vault history stays 12 months after cancel or downgrade, then is deleted. A customer can ask privacy@trydatapipe.com to delete the workspace sooner.

International transfers

Subprocessors may store data in the United States. Where required, transfers use the EU standard contractual clauses. The company address and governing law are still placeholders until the owner fills them in.