Data Processing Agreement

What we process

• Purpose: rendering your documents into PDFs, storing your templates, their versions and their files so you can render them, and keeping the usage records described in the Privacy Policy.
• Data: whatever personal data you include in your HTML, render data, templates and files.
• People concerned: the people your documents are about, such as your customers, employees or contacts.
• Duration: while your account exists, then until deletion as set out below.

Your instructions

We process that data only to provide the service, following your instructions, which are your API calls, your actions in the dashboard and this agreement. We tell you if we think an instruction breaks the GDPR. We do not use the data for any other purpose.

Confidentiality

Only the operator of Revecto has access to the data, and only when needed to run the service, fix a problem or answer your request.

Security

We protect the data with the measures described in the Security section of the Privacy Policy at www.revecto.dev/privacy: HTTPS, separation between accounts and keys stored only as a hash. The database is stored in the European Union. Conversions are processed at the Cloudflare location nearest the caller and counted in the region of the project (European Union, United States, or Asia-Pacific on a best-effort basis); templates and usage records are stored in the European Union. Documents are not stored, apart from what the usage records hold.

Sub-processors

You authorise these sub-processors:

We tell you by email at least 30 days before adding or replacing a sub-processor. If you object, you can close your account at no cost before the change. We bind each sub-processor to data protection obligations equivalent to these.

Resources your documents reference, such as images, stylesheets and fonts, are fetched from the addresses you write, on your instruction; their hosts are not our sub-processors. When your document uses Google Fonts with the Forme engine, up to 800 distinct characters of it are sent to Google Fonts on your instruction.

Transfers outside the European Union

Our sub-processors take part in the EU–US Data Privacy Framework, and their data processing terms include the European Commission's Standard Contractual Clauses.

For a project created in the United States or Asia-Pacific region, Cloudflare processes its usage counters, reservations and key identities in that region before they are stored in the European Union.

Help with your obligations

We help you, as far as we reasonably can, to answer requests from the people concerned, to carry out data protection impact assessments and to meet your security obligations.

Data breaches

We tell you without undue delay, and at the latest within 48 hours of becoming aware of it, of any breach affecting that data, with the information we have about it.

Deletion

The HTML and data you send to /v1/convert and /v1/render and the PDFs we return are not stored once the response is sent, apart from the request logs, kept for up to 30 days, and the usage records, kept while your account exists, which can hold the parts listed in the Privacy Policy. When your account is deleted, we delete your templates and their files within 30 days.

Audits

We make available the information needed to show that we meet this agreement. We allow audits, including inspections, by you or an auditor you mandate, on 30 days' notice, at your cost and at most once a year, unless a breach affecting your data has occurred.

This agreement is available in English and in French; both versions have the same value.