Data Processing Addendum

Version 1.0 · June 24, 2026

Roles

The customer acts as controller for personal data submitted to the service. PlaceRankFlow acts as processor and processes data only to provide and secure the contracted service.

Security measures

Measures include TLS, encrypted Google refresh tokens, access controls, scoped OAuth, audit logging, data minimization, retention jobs and documented incident handling.

Subprocessors

Core subprocessors include Cloudflare, Google and Resend. Optional integrations become subprocessors only when enabled by the customer.

Deletion and return

Upon termination or a valid request, customer data is deleted according to documented retention schedules and applicable legal requirements.

Requests

Contact [email protected] for a countersigned copy or subprocessor information.