Data Processing Addendum.

You are the controller of personal data you input. Zeit Capital LTDA acts as processor on your behalf to the extent necessary to deliver the service.

We process personal data solely to provide the service as documented in our Terms and Privacy Policy, unless you instruct us otherwise in writing.

We rely on a documented list of sub-processors (infrastructure, LLMs, analytics). Material changes are announced at least 30 days in advance. You may object to a new sub-processor in writing; if we cannot reasonably accommodate the objection, you may terminate the affected subscription.

We apply industry-standard technical and organizational measures: encrypted transport (TLS 1.2+), encryption at rest, least-privilege access controls, audit logging, and annual review.

You remain responsible for responding to data subject requests. We will assist you by providing export, correction, and deletion tools within the dashboard.

We will notify you without undue delay (and in any event within 72 hours where feasible) of any confirmed personal data breach affecting your data, along with the facts known at that time.

On termination, we delete or return your personal data within 30 days, except where retention is required by law.

Data protection officer: dpo@tryrepost.com.