Data Processing Agreement (DPA)
Last Updated: December 12, 2024 • Applies to all paid subscriptions
This Data Processing Agreement forms part of your subscription and outlines how we process, protect, and safeguard customer data in compliance with GDPR, CCPA, and other major privacy regulations. It includes the EU Standard Contractual Clauses (2021).
Key Commitments
- You retain full ownership of your data.
- We never sell or use your data for advertising.
- 48-hour breach notification window.
- Data is encrypted both at rest and in transit.
- Right to audit available for Enterprise plans.
- 30-day notice for introducing new sub-processors.
- Full export and deletion options upon termination.
Current Sub-processors
| Company | Service | Location |
|---|---|---|
| Supabase | Database & Storage | USA |
| Cloudflare | CDN, Security, Edge Network | Global |
| Resend | Transactional Email | USA |
| Upstash | Redis (Queueing & Caching) | USA |
Need a Signed Copy?
To request a signed PDF version of this DPA, contact legal@perfect10.com. We typically respond within 24 hours.