Data Processing Agreement

This Data Processing Agreement (DPA) forms part of the Terms of Service between DeadPixel Studio UG ("Processor") and you ("Controller") for the Lighthouse platform at lighthouse.build.

1. Definitions

Personal Data: any information relating to an identified or identifiable natural person collected through the Lighthouse platform.

Processing: any operation performed on Personal Data, including collection, storage, retrieval, and deletion.

2. Scope of Processing

We process Personal Data solely to provide the Lighthouse service as described in our Terms of Service. This includes storing waitlist signups, survey responses, and subscriber lists on your behalf.

3. Your Responsibilities

• Ensure you have a lawful basis to collect data from your users
• Provide a privacy policy to individuals whose data you collect
• Respond to data subject requests (we provide export and deletion tools)

4. Our Obligations

• Process data only on your documented instructions
• Ensure personnel are bound by confidentiality obligations
• Implement appropriate technical and organizational security measures
• Notify you without undue delay of any data breach
• Delete or return all Personal Data upon termination of the service

5. Sub-processors

We use the following sub-processors:

• Supabase, Inc. (USA) - Database and authentication
• Stripe, Inc. (USA) - Payment processing
• Resend, Inc. (USA) - Email delivery
• Vercel, Inc. (USA) - Application hosting

Each sub-processor is bound by data processing terms at least as protective as this DPA. We will notify you before adding new sub-processors.

6. Data Transfers

Personal Data may be transferred to the United States where our sub-processors operate. These transfers are protected by Standard Contractual Clauses (SCCs) as approved by the European Commission.

7. Data Retention and Deletion

We retain Personal Data for the duration of your subscription. Upon cancellation, all data is deleted within 30 days. You may request earlier deletion at any time through your dashboard or by contacting us.

8. Contact

For DPA-related questions, reach us through our contact page.