Data Processing Addendum

Effective 16 August 2026 · Last updated 16 August 2026

Processor terms for customer traffic and configuration data.

1. Roles

You are the controller (or a processor for your own customers). Spatial Regal Digital Ltd is the processor for Service Data that transits or is stored to provide Zipper.

2. Instructions

We process Service Data only to provide, secure, and support the Service, and as documented in the Privacy Policy. We will not use Service Data for advertising.

3. Security

We implement encryption in transit (TLS 1.2+), encryption at rest for control-plane databases, least-privilege access, and workspace isolation via row-level security. Portcullis secrets are stored hashed. See /legal/security.

4. Subprocessors

Current subprocessors are listed at /legal/subprocessors. We will post updates there at least 14 days before a new subprocessor processes Service Data.

5. Assistance and deletion

We will assist with data-subject requests that you cannot fulfill from the dashboard. On termination we delete or return Service Data within 30 days unless law requires longer retention.