Data processing addendum

This DPA forms part of the Terms of Service between you and Google Maps Leads. It applies when we process personal data on your behalf.

Subject matter

We process publicly accessible business information (and the contact details derived from those businesses' websites) at your direction. You are the data controller; we are a data processor acting on your documented instructions.

Subprocessors

• Stripe — payment processing
• Neon — application database
• Amazon Web Services (S3, us-east-1) — encrypted storage of scrape outputs
• Vercel — application hosting

Data security

Data at rest is encrypted with AES-256 (SSE-S3 for S3 objects; Neon's encrypted volumes for Postgres). Data in transit uses TLS 1.2+. Access to production data is limited to operations engineers under role-based controls and logged in our audit trail.

Contact

For DPA requests, open a DPA ticket. Routed to 0p@mailagent.to.