Data processing terms

These terms apply when Swipe Files LLC processes personal data for you through Headstream, and they're part of our terms of service. You're the controller. We're your processor.

What we process

Data about your website visitors and customers: online identifiers, IP addresses, device and location data, browsing activity, details captured from forms, optional session recordings, and payment records from Stripe. We process it for as long as your account exists, to provide analytics and attribution to you.

Your responsibilities

• Have a lawful basis for collecting this data, and give the notices your visitors are owed.
• Get any cookie consent the law requires. Headstream tracks by default, so you decide when to load it.
• Don't send us special category data, passwords or payment card numbers.

Our commitments

• We process personal data only on your instructions, which include using the service and its settings.
• People with access are bound by confidentiality.
• We use appropriate security, including encryption in transit, isolation between customers and access controls.
• We help you respond to data subject requests. You can erase a person through the app or API.
• We'll tell you without undue delay after becoming aware of a personal data breach affecting your data.
• We give you the information reasonably needed to show compliance.
• When you close your account, we delete your personal data on request, unless the law requires us to keep it.

Subprocessors

You authorize these providers. We'll update this list before adding a new one, and you can object by emailing us.

International transfers

Data is processed in the United States. Where the law requires, transfers rely on the European Commission's Standard Contractual Clauses, which apply on request.

Contact

Email ch@coreyhaines.co.