Data Processing Terms
Effective 17 October 2026. These complement the Terms of Use and apply whenever your automations process personal data on the platform.
Who is who
You are the controller: you decide which personal data enters the platform and what for. Datallog is the processor: it processes that data on your behalf, under your instructions.
Your instructions are your code. There is no other channel: what your automation reads, writes and returns is what Datallog runs. Beyond that, we only process this data where the law requires it — and in that case we tell you beforehand, unless legally barred.
For your account data (profile, billing, sign-in) the relationship is different: there Datallog is the controller, and the Privacy Policy governs.
What we process for you
| Nature | hosting, code execution, storage and transmission |
| Purpose | providing the platform: running your automations and keeping what they produce |
| Duration | as long as your account exists, or until you delete the data |
| Types of data | whatever your code sends — Datallog neither chooses nor inspects it |
| Data subjects | whoever you decide: your customers, your leads, your team |
What Datallog commits to
- Processing only under your instructions, never for our own purposes, and never selling your data or using it to train a model of ours.
- Keeping confidentiality: our team's access to a customer's data is limited to what is needed to operate and support the platform, and it is logged.
- Maintaining security measures proportionate to the risk: per-account isolation in the database, a dedicated short-lived credential per run, portal content served from an isolated origin, encryption in transit and at rest, and role-based access control inside the account.
- Notifying you of an incident affecting your data, with what we know, in time for you to meet your own obligations.
- Helping you answer data subjects and authorities, with the information available on our side.
- Returning or deleting the data at the end of the relationship, as described in the Privacy Policy's retention section.
Sub-processors
To provide the platform, Datallog uses these sub-processors, and you authorize them by accepting these terms:
| Sub-processor | Role | Where |
|---|---|---|
| Amazon Web Services | hosting, database, storage | United States (us-east-1) |
| Stripe | payments | United States |
| Mailgun | transactional email | United States |
| Pusher | real-time notifications in the dashboard | United States |
| Twilio | WhatsApp messages, when you enable them | United States |
| Anthropic, OpenAI | the dashboard's AI agent, when you use it | United States |
Each one receives only what its function requires. If we add a sub-processor, we update this list and tell you before it starts processing your data.
The AI agent deserves its own line: it sees only what you send in the conversation and the code of the project it is working on, and it only runs when you use it. A project that never opened the agent has had no code sent to any AI provider.
International transfer
Processing happens in the United States. By sending personal data to the platform, you authorize that transfer and state that you have a legal basis for it.
What stays with you
Having a legal basis for the data you put here, informing data subjects, answering their requests, not sending personal data you do not need, and not using the platform for processing the law forbids.
The platform is not designed for health data, regulated financial data or other special regimes. If you need that, talk to us first.
Audit
On reasonable request, and no more than once a year, we provide the information needed to demonstrate compliance with these terms. An on-site audit, where the law requires one, is arranged in advance and without disrupting service to other customers.
Term
These terms apply for as long as Datallog processes personal data on your behalf and, where applicable, survive the closing of the account until the data is deleted.
Data protection contact: contato@datallog.com.