Data Processing Agreement

Last updated 5 November 2026. Operator: Renewproof (a MINIMALCULT project). Contact: hello@renewproof.com.

This Data Processing Agreement forms part of the Terms of Service between Renewproof (processor) and the business that installs Renewproof (controller). It applies to personal data of the controller's subscribers processed under UK GDPR and the Data Protection Act 2018.

1. Subject matter and duration

Processing of subscriber data to schedule and send statutory subscription notices, keep an evidence log, and calculate or issue refunds, for as long as the app is installed plus the retention period in section 7.

2. Data and data subjects

Data subjects: the controller's subscribers. Data: email address, name if present in Stripe, subscription and invoice dates and amounts, country signals (billing address country, card country, tax location, currency). No special category data.

3. Instructions

We process only on the controller's documented instructions, which are the settings in the app and these terms, unless the law requires otherwise; we will tell the controller if an instruction appears unlawful.

4. Confidentiality and security

Staff with access are bound by confidentiality. Measures include encryption in transit and at rest, signed and verified webhooks, least-privilege Stripe permissions, secrets held in the hosting platform's secret store, access logging, and hashing of subscriber emails in the evidence log.

5. Sub-processors

Cloudflare, Inc. (hosting, database, queues), Stripe, Inc. (app platform), and our email delivery provider. We give 30 days' notice of new sub-processors by email; the controller may object.

6. Assistance and breaches

We help the controller answer data-subject requests and carry out impact assessments where relevant, and notify the controller without undue delay, and within 48 hours, of a personal data breach affecting its data.

7. Retention and deletion

Subscriber email addresses are deleted 30 days after the subscription ends or the app is uninstalled, whichever is earlier. The evidence log (with hashed identifiers) is kept for 6 years after the notice was sent, to cover the limitation period for contract claims, unless the controller asks for earlier deletion.

8. Transfers

Where data leaves the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses or another lawful mechanism.

9. Audits

We make available the information needed to demonstrate compliance with this agreement and allow reasonable audits on 30 days' notice, no more than once a year.