📝 Draft for review — this document is a working template and is not yet legally reviewed. Placeholders in yellow must be completed before launch.

Data Processing Addendum

Effective date: 2026-07-13 · Service: IPUIPU (ipuipu.com), operated by [Company legal name] (“IPUIPU”, “we”, “us”). Contact: support@ipuipu.com.

This Data Processing Addendum (“DPA”) supplements the Terms where IPUIPU processes personal data on your behalf as a processor.

Roles

You are the controller; IPUIPU is the processor. We process personal data only on your documented instructions to provide the service.

Sub-processors & security

We engage sub-processors under written contract and maintain appropriate technical and organizational measures (see Security).

Data subject requests & breach

We assist you in responding to data-subject requests and notify you without undue delay upon becoming aware of a personal data breach.

Sub-processors: Amazon Web Services (hosting, database, backups and transactional email — Singapore region); Google (sign-in with Google and website analytics); Paddle (payments, billing and tax as merchant of record); Slack (internal operational alerts to our staff). We will notify customers of new sub-processors before they process customer data. Standard Contractual Clauses are available on request at support@ipuipu.com.