Data processing agreement
The one your accountant or IT person asks for. It covers handling your customers' information on your behalf, and lists every company underneath.
Written 22 September 2026
When this applies
Whenever somebody messages your business through a connected account and that message reaches this. Those messages are your customers' information, you decide what happens to it, and we act only on what you have asked for.
In the words the law uses: you are the controller and we are the processor. This document forms part of your agreement with us and takes precedence over the Terms of service wherever the two differ on this subject.
What is being handled, and for how long
The subject is the messages, comments and replies that reach your connected accounts, and the replies you send back. The purpose is letting you read and answer them in one place.
It lasts as long as your account is open, and ends when it closes.
- Kinds of information: names, whatever contact detail the platform passes on, the text of a message and the text of any reply.
- Whose: your own customers and anybody else who chooses to message you.
- Nothing here is asked for, and none of the special categories the law singles out is sought. What arrives is whatever somebody chose to write.
What we will and will not do with it
Only what you have asked for. It is not sold, it is not used to advertise, and it is not used to train anything.
Everybody who can reach it is under a duty of confidence that does not end when they stop working on this.
Keeping it safe
It sits on a server in Germany, encrypted at rest and in transit. Access is limited to the people who need it to keep the thing running, and what they did is recorded.
Backups are taken nightly and overwritten after 14 days.
The companies underneath
These are the sub-processors, and the Your accounts page says in one line what each one sees: netcup, Anthropic, Resend, Stripe, Sentry and Google Analytics.
You are told 30 days before one is added or replaced. If a change does not suit you, you can stop before it takes effect and be refunded for the time you have not used.
Each of them is under written terms no weaker than these.
Helping you answer your own customers
Where one of your customers asks you for a copy of what is held, or asks you to delete it, you can do both yourself from inside the app.
Where you cannot, ask and it is done for you at no charge.
If something goes wrong
You are told within 72 hours of us knowing — what happened, whose information it affected, what the likely consequences are and what is being done about it. That is in time for you to meet your own duty to report it.
You are told even where it turns out to be small, because which of those it is should be your judgement rather than ours.
Getting it back, and getting rid of it
When your account closes, everything stays available to export for 30 days. After that it is deleted.
Deleted means deleted, other than copies sitting in a backup, which are overwritten within 14 days. Nothing is kept beyond that unless the law requires it.
Checking
Ask, and you get what is needed to satisfy yourself that this is being done properly. Where that is not enough, an audit can be arranged, at reasonable notice and no more than once a year unless something has gone wrong.
Information leaving the UK
Where a company above is outside the UK, the transfer is covered by the terms the law requires for it, and by the UK addendum where that applies.
If any of this is unclear, say so and it gets rewritten rather than explained. A document you had to ask about is a document that was not plain enough.