Data Processing Addendum

This Addendum supplements our Terms of Service and applies where Extracto processes personal data on your behalf under the GDPR, UK GDPR, or comparable laws. A countersigned copy is available to paying customers on request at hello@getextracto.dev.

Roles

For data you submit and extract, you act as the controller and Extracto acts as a processor. You are responsible for having a lawful basis for the data you choose to process through the Service.

Scope of processing

We process personal data only to provide the Service and on your documented instructions (your API requests). Subject matter is web data extraction; the nature is transient processing of page content and short-lived caching of results.

Subprocessors

We use a limited set of subprocessors to run the Service (cloud compute and browser rendering, a model provider for extraction, and a payment processor). We maintain appropriate agreements with each and will provide the current list on request.

Security and assistance

We apply reasonable technical and organizational measures, assist you with data subject requests where applicable, and will notify you without undue delay of a personal data breach affecting your data.

International transfers and deletion

Where data is transferred internationally we rely on appropriate safeguards such as Standard Contractual Clauses. On termination we delete or return personal data as instructed, subject to legal retention requirements.