When your apps send events, you are the controller and XKD Labs (OPC) Private Limited is the processor (GDPR Art. 28). We process that data only to provide the service, on your instructions.
- Staff access is limited to running and fixing the service.
- Every query is scoped to one environment; there is no user-written SQL.
- Subprocessors are listed below, and changes are announced in advance.
- We help with access and erasure requests; owners can erase data themselves.
- We tell you without undue delay about a breach that affects your data.
- At the end of the service, data is deleted within 30 days.
Transfers outside the EU rely on the Standard Contractual Clauses. For a signed data processing agreement, write to us.
Subprocessors
The services that may process your data, and why.
| Company | Purpose | Location |
|---|---|---|
| Amazon Web Services | Hosting, storage, backups and email delivery | United States |
| Amazon Web Services | Ingest servers that briefly hold events before they are stored | United States, India |
| Payment providers | Payments and tax, as merchant of record where they offer it | United Kingdom, United States, India |
| AI model providers | The optional dashboard assistant; it sees field names only, never rows, and is asked not to train on them | United States |
The DB-IP country table is downloaded and used on our own servers; nothing is sent to DB-IP.
Questions: privacy@simpledatalogs.com.