Data processing agreement

This agreement applies where you are a controller of personal data and we process it for you. It forms part of the terms of service, and takes effect when you accept those — you do not need to sign anything separately, though we will countersign a copy on request.

Roles

You are the controller of the click data your links generate. We are your processor for that data, and the controller of your own account data.

What we process

Click records, as itemised in the privacy policy: timestamp, link, destination, IP address (unless you have switched IP storage off for the domain), derived location, network, user agent, device, referrer, search term and campaign parameters — plus the bot judgement and the A/B variation served.

Data subjects are the people who click your links and the team members you invite. Processing lasts for as long as your account is open, subject to the retention windows in the privacy policy.

Our obligations

• Process only on your documented instructions, which the product's settings express.
• Keep the data confidential and bind everyone with access to confidentiality.
• Apply the technical and organisational measures listed on the security page.
• Engage sub-processors only under equivalent terms, and give you 30 days' notice of a new one so you may object.
• Help you answer data subject requests and, where required, data protection impact assessments.
• Notify you of a personal data breach without undue delay, and within 72 hours of becoming aware.
• Delete or return the data at the end of the agreement.

Your obligations

You decide what the links do and who clicks them, so you are responsible for having a lawful basis, for telling your own visitors what you collect, and for configuring the product to match — including whether IP addresses are stored at all, and which of the forwarding destinations in the privacy policy you switch on.

International transfers

Where data leaves the EEA or UK we rely on the Standard Contractual Clauses, incorporated here by reference.

Audits

You may audit our compliance once a year on 30 days' notice. We hold no third-party audit report or certification and do not claim one, so an audit means answering your questions and showing you the configuration — not handing over someone else's certificate.

Sub-processors

The current list is on the sub-processors page.