Legal

Data processing addendum

For customers with GDPR or equivalent obligations.

Draft — pending legal review

This page states our intended position so the service is transparent about how it works. It has not yet been drafted or reviewed by a lawyer and is not a binding agreement.

Roles

For account and usage data, we act as a data controller. For personal data you submit through the API — most commonly locations tied to identifiable individuals in alert subscriptions — we act as a processor on your instructions.

Sub-processors

We maintain a current list of sub-processors, including hosting, payment and email providers, and will give notice before adding one.

Transfers and security

International transfers are covered by standard contractual clauses. Data is encrypted in transit and at rest, and access is limited to personnel who need it to operate the service.