Data processing terms

When your apps hold personal data (your customers' accounts, form submissions, orders), you are the controller and LazyFrog is your processor. We:

• process it only to run the service for you, on your instructions;
• keep it in Germany, encrypted at rest, in a workspace isolated from every other customer's;
• make sure everyone with access is bound to confidentiality;
• use only the sub-processors listed, and tell you before adding one;
• help you answer your users' requests, with export and deletion tools you can use yourself;
• tell you without undue delay if we become aware of a breach affecting your data;
• delete it when you delete the project or your account, after the recovery window;
• give you the information you need to show compliance.

A signable data processing agreement will be available to download here.