Data Processing Agreement

Operator: João Pedro Reis, trading as PinkPepper. NIF 256709661. Address: Rua Duarte Galvão 14 r/c dto., 1500-254 Lisboa, Portugal. Contact: support@pinkpepper.io. For customer content processed on documented instructions, the customer is controller and PinkPepper is processor.

PinkPepper processes personal data only on documented instructions, imposes confidentiality, applies appropriate security, assists with data-subject requests, assists with security and DPIA duties, deletes or returns data at the end of service where required, and makes audit information available.

Audited vendors used to provide the service include Supabase, Vercel hosting, Vercel Analytics, Vercel Speed Insights, Groq, OpenAI, Stripe, Resend, Upstash, Google Analytics, and Google sign-in. Hosting, encryption, international transfers, backups, certifications, and training-use claims are qualified where they depend on provider contracts or dashboard configuration.

Transfers use provider terms, SCCs, adequacy safeguards, or other lawful mechanisms.

PinkPepper will notify the controller without undue delay after becoming aware of a personal-data breach affecting processor data.

Customers needing a signed DPA should email support@pinkpepper.io.