1. Roles
You are the Data Controller for personal data you upload about your end customers. BoostProfits acts as the Data Processor for that data.
2. Subprocessors
- Cloudflare, AWS — hosting and infrastructure
- Resend — transactional email delivery
- Paddle.com Market Limited — Merchant of Record (payments, subscription billing, tax, invoicing)
3. International transfers
International transfers are governed by Standard Contractual Clauses (SCCs) or applicable adequacy decisions.
4. Security
TLS 1.2+ in transit, AES-256 at rest, role-based access, audit logging, and annual penetration testing.
5. Breach notification
We notify affected customers within 72 hours of confirming a personal data breach.
6. Sign
Email dpa@boostprofits.com for a counter-signed PDF copy.