Data Processing Agreement (DPA)
This data processing agreement applies to the processing of personal data through ColorBestie. This document is a standard template and can be adapted for business customers on request.
1. Roles and definitions
The customer is the data controller. ColorBestie is the data processor to the extent that personal data is processed on behalf of the customer.
2. Purpose of processing
Processing takes place solely to provide the ColorBestie service, including authentication, storage of uploads, generation of AI previews and billing.
3. Categories of personal data
- Account information (such as email address and name)
- Usage and log data
- Uploaded images and generated results
4. Subprocessors
ColorBestie uses subprocessors for hosting, databases, authentication, payments and AI services. An up-to-date list is available on request.
5. Security
ColorBestie implements appropriate technical and organisational measures to protect personal data against loss or unlawful processing.
6. Retention periods and deletion
Personal data is retained no longer than necessary to provide the service and comply with legal obligations. After the service ends, data can be deleted on request.
7. Data subject rights and audits
ColorBestie assists the customer with data subject requests (access, deletion, correction) and provides reasonable cooperation with audit requests.
8. Data breaches
Security incidents affecting personal data are reported without undue delay, with relevant information about their nature, impact and the measures taken.
9. Contact
For questions about this data processing agreement: support@colorbestie.app