Data Processing Addendum
This addendum describes how AppSite processes personal information on your behalf. It forms part of the Terms of Service. What AppSite processes differs sharply between the two hosting models.
Your workspace runs on AppSite-operated Google Cloud infrastructure. Your data is stored in shared databases, separated from other customers by tenant identifier and enforced server-side security rules. AppSite operates, deploys, patches, monitors and backs up the platform for you.
Roles
You are the controller of the personal information in your workspace. AppSite is the processor, and processes it only on your documented instructions — which include your configuration of the platform and your use of its features.
Scope of processing
Subject matter: provision of the AppSite platform. Duration: the term of your subscription, plus any retention period stated in the Privacy Policy. Nature and purpose: hosting, transmission, storage, security, support and metering.
Categories of data subject: your personnel, your customers and contacts, and any other individuals whose information you choose to store.
Categories of personal data: whatever you choose to store, which may include names, contact details, business records, financial records and communications.
AppSite obligations
Process only on your instructions, unless required by law — in which case we will tell you first unless the law forbids it.
Ensure people authorized to process the data are bound by confidentiality.
Apply appropriate technical and organizational security measures.
Assist you, at your cost where the effort is substantial, with data subject requests, impact assessments and regulator consultations.
Notify you without undue delay after becoming aware of a personal data breach affecting your data.
Delete or return the data at the end of the relationship, as set out in the Privacy Policy.
Subprocessors
You give general authorization for AppSite to engage the subprocessors listed below. We impose data protection obligations on each of them no less protective than those in this addendum, and remain responsible for their performance.
We will give reasonable notice before adding a subprocessor that materially affects the processing of your data, so you can object.
| Subprocessor | Purpose | Location |
|---|---|---|
| Google Cloud Platform / Firebase | Application hosting, database, authentication, file storage, serverless functions | Canada and United States |
| Twilio SendGrid | Transactional and notification email delivery | United States |
| Stripe | Payment processing and subscription billing | United States and Canada |
| Square | Payment processing for in-person and hosted checkout | United States and Canada |
| Google (Gemini API) | AI generation features, where the customer enables them | United States |
| Anthropic (Claude API) | AI generation and assistance features, where the customer enables them | United States |
International transfers
Some subprocessors are in the United States. Where personal information moves across borders we rely on the transfer mechanisms available under applicable law, and require appropriate safeguards from the receiving party.
Audit
On reasonable written request, and no more than once a year unless a regulator or a breach requires otherwise, we will provide information necessary to demonstrate compliance with this addendum.
Your obligations
You are responsible for having a lawful basis for the personal information you put into the platform, for providing required notices to data subjects, and for configuring access and retention appropriately.
You should not store special-category or highly sensitive personal information without encrypting it before storage — see the Security Policy.
Contact
Data protection enquiries: privacy@appsite.ca
data-processing v1.0.0 · shared · c7b7395b255bdbca
Your platform runs inside your own Google Cloud organization, on projects and a billing account you own. Your data is never stored in AppSite's shared databases. AppSite delivers the software to repositories you control, and you perform the deployment. AppSite holds no standing access to your environment.
Roles
You are the controller of the personal information in your workspace, and you also operate the systems that store it. AppSite is not a processor of that data in normal operation, because it neither holds nor accesses it.
AppSite becomes a limited processor only when you grant access for a specific support engagement, for the duration and scope of that engagement.
Scope of processing
Subject matter: provision of the AppSite platform. Duration: the term of your subscription, plus any retention period stated in the Privacy Policy. Nature and purpose: hosting, transmission, storage, security, support and metering.
Categories of data subject: your personnel, your customers and contacts, and any other individuals whose information you choose to store.
Categories of personal data: whatever you choose to store, which may include names, contact details, business records, financial records and communications.
AppSite obligations
Process only on your instructions, unless required by law — in which case we will tell you first unless the law forbids it.
Ensure people authorized to process the data are bound by confidentiality.
Apply appropriate technical and organizational security measures.
Assist you, at your cost where the effort is substantial, with data subject requests, impact assessments and regulator consultations.
Notify you without undue delay after becoming aware of a personal data breach affecting your data.
Delete or return the data at the end of the relationship, as set out in the Privacy Policy.
Subprocessors
You give general authorization for AppSite to engage the subprocessors listed below. We impose data protection obligations on each of them no less protective than those in this addendum, and remain responsible for their performance.
We will give reasonable notice before adding a subprocessor that materially affects the processing of your data, so you can object.
| Subprocessor | Purpose | Location |
|---|---|---|
| Google Cloud Platform / Firebase | Software runs on projects owned and billed by the customer; Google is the customer's own provider, contracted directly | Regions selected by the customer |
| Twilio SendGrid | Transactional and notification email delivery | United States |
| Stripe | Payment processing and subscription billing | United States and Canada |
| Square | Payment processing for in-person and hosted checkout | United States and Canada |
| Google (Gemini API) | AI generation features, where the customer enables them | United States |
| Anthropic (Claude API) | AI generation and assistance features, where the customer enables them | United States |
International transfers
Some subprocessors are in the United States. Where personal information moves across borders we rely on the transfer mechanisms available under applicable law, and require appropriate safeguards from the receiving party.
Audit
On reasonable written request, and no more than once a year unless a regulator or a breach requires otherwise, we will provide information necessary to demonstrate compliance with this addendum.
Your obligations
You are responsible for having a lawful basis for the personal information you put into the platform, for providing required notices to data subjects, and for configuring access and retention appropriately.
You should not store special-category or highly sensitive personal information without encrypting it before storage — see the Security Policy.
Contact
Data protection enquiries: privacy@appsite.ca
data-processing v1.0.0 · dedicated · fd5b84d31c7c86e8