Legal
Data Processing Agreement
This DPA supplements our Terms of Service for customers subject to GDPR. Signed copies available on request.
Parties
You are the data controller. Pulsar Ltd. is the data processor for personal data processed on your behalf.
Sub-processors
Current list: OVH (hosting), Stripe (payments), Postmark (transactional email). Notice of new sub-processors sent 30 days in advance.
Transfers
Data stays in the EEA unless you opt in to US hosting. Standard Contractual Clauses apply where relevant.
Security
See our Security page for encryption, authentication, and audit details.