Data Processing Agreement

Standard GDPR DPA // v1.0

Overview

This Data Processing Agreement ("DPA") forms part of the Terms of Service between Stock Debrief and the User. It reflects the parties' agreement with regard to the processing of personal data, in accordance with the requirements of Data Protection Laws (including the GDPR).

Data Controller

The Individual or Entity using the Stock Debrief services.

Data Processor

Stock Debrief (stockdebrief.com).

Processor Obligations

  • Confidentiality: We ensure that persons authorized to process the personal data have committed themselves to confidentiality.
  • Security: We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk (SSL encryption, secure hosting).
  • Sub-processing: We use reputable sub-processors (e.g., Supabase, Vercel, Resend) and remain liable for their compliance.
  • Data Subject Rights: We assist controllers in fulfilling their obligations to respond to requests for exercising data subject rights.

International Transfers

Data may be processed in the United States or other jurisdictions where our cloud infrastructure resides. We use Standard Contractual Clauses (SCCs) to ensure data protection remains consistent with GDPR standards.

For a signed copy of this DPA for your organization, please contact us.

privacy@stockdebrief.com