Data Processing Agreement

Overview

This Data Processing Agreement ("DPA") forms part of the Terms of Service between you (the "Customer") and FinchKeep (the "Processor").

Data Processing Terms

• We process data only as instructed by you
• We implement appropriate security measures
• We assist with GDPR compliance obligations
• Data is stored in secure data centers located in Australia (Sydney and Melbourne)

Sub-processors

We use the following sub-processors:

• Stripe: Payment processing
• Oracle Cloud: Infrastructure hosting
• AWS SES: Email delivery

Data Subject Rights

We support your obligations to respond to data subject requests, including:

• Right to access
• Right to rectification
• Right to erasure
• Right to data portability

Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security audits.

Contact

For DPA inquiries: dpo@finchkeep.nz