Data processing agreement
Last updated: 14 October 2026
This agreement is part of our Terms of service. It applies when the files you upload, or the pages we check for you, contain personal data. You (the customer) are the controller. DECRAWL DATA, S.L. is the processor. It follows Article 28 of the GDPR.
1. What we process
- Purpose: to run data checks and visual checks and to give you reports, fixes and fixed files.
- Data: any personal data in your files and in the pages at the URLs you give us. For example names, contact details or reviews.
- People concerned: people whose data appears in your files or on those pages.
- Duration: while you use the service, plus the deletion periods below.
2. Our obligations
- We process the data only on your documented instructions. Your instructions are these terms and what you choose in the app.
- People who work on the service are bound by confidentiality.
- We keep the data secure. See section 4.
- We help you answer requests from people exercising their rights, and with security and impact assessments where needed.
- We tell you without undue delay, and within 48 hours of becoming aware, of any personal data breach affecting your data.
- We give you the information you need to show compliance, and allow reasonable audits with 30 days' notice.
3. Subprocessors
You authorize us to use subprocessors. The current list is on our Subprocessors page. We'll tell you at least 30 days before we add or replace one. You can object. If we can't solve your objection, you can end the service. Each subprocessor is bound by data protection terms at least as strict as these.
4. Security
- Data is encrypted in transit (TLS).
- Files and screenshots are stored privately. They are only reachable behind login or through short-lived links.
- Only people who need access to run the service have it.
- We keep backups and access logs.
5. Transfers outside the EEA
When a subprocessor is outside the European Economic Area, we use the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
6. Deletion
Uploaded files and fixed files are deleted 30 days after upload. Reports, fixes and screenshots are deleted within 30 days after you delete them or your account, and backups within 30 more days.