Data Processing Agreement (DPA)
Last updated: July 28, 2026
This DPA supplements our Privacy Policy when we process personal data on behalf of a client (the "Controller"), with ialae acting as "Processor".
1. Sub-processors
- Meta / Facebook — ad measurement, under consent.
- OpenAI — summary generation from wizard answers.
- Google (Gmail SMTP) — transactional email delivery.
- Amazon Web Services — hosting.
2. Security
Encrypted connections (HTTPS), authenticated admin access, hashed passwords (never stored in plain text).
3. Retention and deletion
See the "Retention" section of our Privacy Policy: 3 months for rejected profiles.