Data processing

Data Processing Agreement

Parties

This Data Processing Agreement applies when Roast My Funnel OÜ processes personal data on behalf of a customer as part of providing website audit services.

Roles

For customer-submitted website, account, and audit data, the customer may act as controller and Roast My Funnel OÜ may act as processor. For product analytics, billing, security, and service operations, Roast My Funnel OÜ may act as controller as described in the Privacy Policy.

Processing instructions

Roast My Funnel OÜ processes personal data only to provide and secure the service, generate reports, support customers, comply with law, and follow documented customer instructions consistent with the Terms.

Categories of data

Processed data may include account details, email addresses, submitted URLs, visible website content, screenshots, audit configuration, buyer persona selections, generated reports, payment metadata, technical logs, and support communications.

Subprocessors

Roast My Funnel OÜ may use subprocessors for hosting, CDN/security, storage, payments, email, analytics, browser automation, support, and AI model processing. Production subprocessor names should be finalized before launch and made available on request.

Security measures

Roast My Funnel OÜ uses reasonable technical and organizational measures including access controls, encrypted transport, vendor safeguards, security headers, monitoring, and least-privilege operational practices.

International transfers

Where personal data is transferred outside the EEA, Roast My Funnel OÜ will use appropriate transfer mechanisms such as Standard Contractual Clauses, adequacy decisions, or equivalent lawful safeguards.

Assistance and deletion

Roast My Funnel OÜ will reasonably assist with data subject requests, security incidents, audits, and deletion/export requests where required by applicable law and technically feasible.

Contact

DPA questions can be sent to [email protected].