Data processing agreement

When a visitor clicks a link you published, the service records that click on your behalf: you are the controller of your visitors' click data, and TrueRedirect is the processor. This document is a static agreement — there is nothing to sign; using the service under the terms of service accepts it.

Scope, nature and duration

The processing is the recording and aggregation of click telemetry for the links in your workspace — measurement, nothing else — for as long as the retention section of the privacy notice records.

Categories of data

Click events carry the workspace, link and domain ids, the event type, a coarse classification, an optional country, coarse device strings and a link-bound daily-rotating keyed network identity. No raw IP addresses, ever; region and city are not collected.

Processor obligations

  1. Process only on your documented instructions: the service records clicks for the links you created and for no other purpose.
  2. The persons authorised to process the data are bound by confidentiality.
  3. Security: transport encryption everywhere, secrets separated by purpose (account credentials, click identity and signing each carry their own), and no raw IP addresses anywhere in telemetry.
  4. Sub-processors are exactly the ones the privacy notice names, and the notice is updated when the set changes.
  5. Assistance with data-subject rights: the export and deletion tools are self-service, and the operator answers requests addressed to the published contact.
  6. On account deletion the workspace's data is erased as the privacy notice describes; backup copies age out on their recorded horizons.
  7. The operator's compliance posture is recorded in its compliance note and is under DPO review for the beta.

Transfers

The relational store runs in the EU jurisdiction. The processors the privacy notice names process data under their own terms, and the operator keeps every store's data placement recorded and current.