Data Processing Agreement
If you are a customer in the EU, UK, or another jurisdiction with similar data-protection law, we are happy to enter into a Data Processing Agreement (DPA) that governs how PebbleYard processes personal data on your behalf.
How to request a DPA
Email us at hello@pebbleyard.com with your legal entity name and a contact. We will send our standard DPA for signature, typically within two business days. If your organisation requires its own paper, attach it and we will review.
Sub-processors
Our DPA incorporates the current list of sub-processors we use to deliver the service (for hosting, database, payments, email, error monitoring, and AI processing). The live list, including each vendor's purpose and data location, is published on our Security page.