Data Processing Agreement

This Data Processing Agreement (“DPA”) forms part of the agreement between Dispatcher (“Processor”, “we”, “us”) and the customer entity that accepts Dispatcher's Terms of Service (“Controller”, “you”) for cloud features of the Service. It applies when we process personal data on your behalf in connection with those features.

This DPA is a standard offering for early-access / team use. For a signed PDF or custom enterprise terms, contact legal@getdispatcher.dev. Have counsel review before relying on it for regulated workloads.

1. Roles and scope

For customer content stored in Dispatcher cloud (such as tasks, docs, Sites content, and organization membership metadata), you are the Controller and Dispatcher is the Processor. For account data we determine how to process to operate the Service (for example billing contacts and security logs), Dispatcher may act as an independent controller as described in the Privacy Policy.

Processing is limited to providing, securing, and supporting the Service, and to instructions you give through the product or in writing.

2. Categories of data and data subjects

Depending on how you use cloud features, personal data may include identifiers (names, emails, user IDs), organization membership, and content you store that happens to include personal data (for example assignee names in tasks or author information in imported issues). Data subjects may include your employees, contractors, and end users you authorize.

Repository source code, diffs, terminal logs, and agent transcripts from local desktop use are not processed by Dispatcher cloud unless you explicitly submit them (for example in a support ticket).

3. Processor obligations

We will:

• Process personal data only on documented instructions from you, including via product configuration, unless required by law
• Ensure persons authorized to process personal data are bound by confidentiality
• Implement appropriate technical and organizational security measures for the nature of the Service
• Use subprocessors only as described in Section 4 and remain responsible for their performance under this DPA
• Assist you with data-subject requests, DPIAs, and breach notifications where reasonably required by applicable law, taking into account the nature of processing
• Delete or return personal data in cloud features after termination, subject to legal retention and backup rotation described in the Privacy Policy
• Make available information reasonably necessary to demonstrate compliance with this DPA

4. Subprocessors

You authorize us to use the subprocessors listed at /subprocessors. We will impose data protection terms on subprocessors no less protective than this DPA in material respects. We aim to provide 30 days’ notice of material additions; you may object on reasonable data-protection grounds by emailing privacy@getdispatcher.dev.

5. International transfers

Where personal data is transferred from the EEA/UK (or other regions requiring a transfer mechanism) to a country without an adequacy decision, the parties rely on Standard Contractual Clauses (or successor modules) with Dispatcher and/or its subprocessors as applicable, supplemented by the Privacy Policy.

6. Security incidents

We will notify you without undue delay after becoming aware of a personal data breach affecting your cloud personal data, and in any event within 72 hours where required by applicable law, unless prohibited. Notices will go to your account admin email or another address you designate in writing.

7. Controller responsibilities

You are responsible for the lawfulness of personal data you submit to the Service, for providing any required notices to data subjects, and for configuring the Service appropriately (including access controls and what you choose to sync).

8. Term

This DPA follows the term of your use of cloud features under the Terms. Survival applies to obligations that by nature should survive (including confidentiality and deletion).

9. Contact

Privacy: privacy@getdispatcher.dev. Legal: legal@getdispatcher.dev.