Get FREE 7-day trials on all software packages
Data Processing Addendum
Effective: February 06, 2026
This DPA supplements Terms for processing personal data under GDPR/CCPA.
Sub-Processors
We use Stripe, PayPal, MongoDB, Twilio, Cloudinary. We'll notify of changes; you can object within 10 days.
Data Rights
We assist with access/deletion requests within 30 days. Data subjects can exercise rights via jfeliciano@scottapplications.com.
Security
Data encrypted (CSFLE in MongoDB); breaches notified within 72 hrs.
International Transfers
Use SCCs for EU data; no unauthorized transfers.
Audits
Allow audits upon request; we provide SOC 2 reports.
By using services, you agree. Contact for signed copy.