Terms of Service & Data Processing Addendum (DPA)

This agreement governs your use of the d8a.tech platform (the “Service”). By using the Service, you agree to these terms.

1. Service Models & Data Handling

d8a.tech provides clickstream analytics orchestration. Our platform is designed to ensure you maintain full ownership of your data.

On-Premises Deployment: If you host d8a.tech on your own infrastructure, we have no access to your data. In this model, d8a.tech is neither a Data Processor nor a Data Controller under GDPR.
Cloud Deployment with your own storage: We act as a stateless conduit. We forward your data directly to your own storage destination (e.g., BigQuery or your own ClickHouse cluster). We do not store, log, or persist your raw clickstream data; it exists in our volatile memory only for the duration of the transit.
Cloud Deployment with a hosted database: If you choose to have us host the database (e.g., the Cloud Dashboard plan), we store your clickstream data on your behalf in a ClickHouse database in the EU. In this model we are no longer a stateless conduit: we store the data as your Data Processor.

2. Subscriptions and Payments

Fees: Service fees are billed in advance according to your selected plan.
Taxes: All fees are exclusive of VAT or other taxes applicable in the Netherlands or your local jurisdiction.
Suspension: We reserve the right to suspend Service for accounts with invoices overdue by more than 14 days.

3. Intellectual Property

d8a.tech retains all rights, titles, and interests in the platform, including software, code, and documentation. You retain all rights to the data processed through your instance or forwarded to your storage.

4. Data Processing Addendum (DPA)

This DPA applies exclusively to Cloud Deployment users, where d8a.tech transmits your data to your storage or stores it in a hosted database on your behalf.

4.1 Roles and Instructions

You are the Data Controller; d8a.tech is the Data Processor. We process data only upon your instruction (via your configuration settings), to route data to your chosen storage provider or to store it in a hosted database.

4.2 Security

We implement industry-standard technical measures, including TLS encryption for all data in transit, to prevent unauthorized interception. When you use your own storage, “Encryption at Rest” responsibilities reside with your chosen storage provider. When we host the database, your data is stored in the EU and isolated per property.

4.3 Sub-processors

The core d8a.tech data service (collection, processing and the hosted database) uses EU-only sub-processors. The current list is available on request at legal@d8a.tech. Other parts of our business may use providers outside the EU; these are not part of the core data service. You hereby authorize the following sub-processors:

Sub-processor	Purpose	Location
EU infrastructure providers (list on request)	Core data service: collection, processing, hosted database	EU
Vercel / AWS	Website hosting	EU/Global
Stripe	Payment Processing	Global
Postmark	System Notifications & Emails	US
Google Workspace	Internal operations (email, documents)	Global

4.4 Data Subject Rights

When you use your own storage, d8a.tech does not store raw clickstream data, so requests from individuals (Data Subjects) to access, delete, or port their data must be fulfilled by you from your own storage destination. When we host the database, we assist you in fulfilling such requests.

5. Limitation of Liability

d8a.tech is not liable for data loss, security breaches, or service interruptions occurring within your own cloud subscription (e.g., Google Cloud) or your on-premises environment. Our total liability for any claim is limited to the amount paid by you to d8a.tech in the 12 months preceding the claim.

6. Termination

You may terminate your subscription at any time. Upon termination, your access to the Service will cease. If you use your own storage, we hold no clickstream data to return or delete. If we host the database for you, we delete your data after termination; contact us before termination if you need an export.

7. Governing Law and Jurisdiction

These terms are governed by the laws of the Netherlands. Any disputes arising from these terms shall be settled exclusively in the competent courts of Amsterdam, The Netherlands.

Contact: legal@d8a.tech