This data processing agreement sets out how we handle personal data on your behalf when you use RankOtter.
1. When this applies
This agreement applies when you, as a business or agency, use RankOtter to process personal data on your own behalf or for your clients. It forms part of our terms of service.
2. Roles
You are the controller and PS Website Design Ltd is the processor for personal data in the content and Google data you connect. For your account and billing data, we are the controller (see our privacy policy).
3. What we will do
- Process personal data only on your documented instructions
- Make sure our staff are bound by confidentiality
- Keep data secure with appropriate technical and organisational measures
- Help you respond to data subject requests and data breaches
- Tell you without undue delay if we become aware of a personal data breach
- Delete or return personal data at the end of the service
- Make available the information needed to show we comply
4. Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Stripe | Payments | [Location] |
| Anthropic [and others] | AI research and writing | [Location] |
| [Hosting provider] | Application hosting | [Location] |
| [Email provider] | Transactional email | [Location] |
We will give you notice of new sub-processors and a chance to object.
5. International transfers
Where personal data leaves the UK, we use the UK International Data Transfer Agreement or another lawful transfer mechanism.
6. Signing the DPA
This DPA applies automatically when you accept our terms. If you need a signed copy for your records, email [email protected].