Data Processing Addendum

• saysOK acts as processor for customer-controlled monitoring and subscriber data.
• Customers remain controllers for their workspace data.
• Paddle is listed as a subprocessor for paid-plan payment processing.
• Subprocessor changes are published on the Subprocessors page.

Roles

For customer-controlled workspace data, the customer is the controller and saysOK is the processor. saysOK processes personal data only to provide, secure, support, and improve the service.

Processing Details

Processing may include hosting, storing, transmitting, analyzing, alerting on, exporting, and deleting monitoring, incident, notification, audit, and status-page subscriber data.

Subprocessors

saysOK uses subprocessors listed on the Subprocessors page. Paddle is a subprocessor and merchant of record for payment processing for paid plans.

Security

saysOK uses access controls, audit logging, tenant scoping, encryption in transit, operational monitoring, and least-privilege service access appropriate for the service.

Deletion and Export

Workspace owners may request export or deletion. Deletion requests are subject to grace periods, backups, legal obligations, and Paddle's separate payment-record retention responsibilities.