Data Processing Agreement
How we process your viewers’ and contacts’ personal data on your behalf (Art. 28 GDPR).
Last updated: 1 October 2026
This DPA forms part of the Terms for business customers. You are the controller of personal data of your viewers, chat users, subscribers and leads; we are your processor.
Our commitments
- Process personal data only on your documented instructions (the settings you choose in Vidblee).
- Ensure confidentiality of everyone with access; apply encryption in transit and at rest, access control and logging.
- Notify you without undue delay, and within 48 hours, of a personal data breach affecting your data.
- Assist you with data subject requests, impact assessments and authority enquiries.
- Delete or return your data at the end of the Services (export available for 14 days).
- Make available information to demonstrate compliance and allow audits on reasonable notice.
Sub-processors
Cloudflare Inc. (hosting, storage, delivery), Hetzner Online GmbH (EU ingest servers), Bunny.net / BunnyWay d.o.o. (backup delivery), Stripe Payments Europe Ltd. (payments), Resend Inc. (email). We notify you 30 days before adding a sub-processor so you can object.