Draft for lawyer review. Not yet in effect.
Data processing addendum
Roles
For subscriber email addresses and page analytics, the creator is the controller and Placecard is the processor.
Processing
We process personal data only to provide the service, on the creator's instructions, and keep it confidential.
Security
Encryption in transit, row level isolation between creators in the database, least-privilege access, audited administrative access, encrypted backups. See our security notes for detail.
Subprocessors
Listed on the subprocessors page. We will give notice before adding one.
Deletion
Deleting an account removes its data, except commission and payout records, which are kept anonymized for accounting. Backups age out within 14 days.