Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the Terms of Service between you ("Controller") and BugToPrompt ("Processor") and applies where we process personal data on your behalf.

Roles and scope

You are the controller of personal data contained in the bug artifacts you capture from your end users. We act as a processor, processing that data solely to provide the Service and on your documented instructions.

Processor obligations

We will: process personal data only per your instructions; ensure personnel are bound by confidentiality; implement appropriate technical and organizational measures (encryption at rest, access controls, audit trails); and assist with data-subject requests and breach notification.

Subprocessors

You authorize our use of the subprocessors listed in the PII & subprocessor disclosure. We remain responsible for their performance and will give notice of material changes.

International transfers

Where personal data is transferred across borders, we rely on the appropriate safeguards offered by our subprocessors, including standard contractual clauses where applicable.

Deletion

On termination, we will delete or return personal data per your retention settings, subject to legal retention requirements.