Data processing agreement
Last updated: September 23, 2026
1. Parties
The organization created on Prestaday is the controller of its clients' data. [à compléter : entityName] is the processor for that data. User account data (name, email, password, subscription billing) is not covered here: [à compléter : entityName] is the controller for it, as described in the privacy policy.
2. Purpose
Prestaday hosts and processes, on the organization's behalf, the data its users enter to run their jobs: contact details, quotes, contracts, signatures, schedules, invoices, messages, and files.
3. Instructions
The organization authorizes the processing needed to provide the service, keep it secure, and answer support it requested. [à compléter : entityName] does not process this data for its own purposes, does not sell it, and does not use it for prospecting.
4. Subprocessors
The service relies on the providers below. The organization is informed by the publication of this page.
| Prestataire | Rôle | Localisation |
|---|---|---|
| Neon | Base de données PostgreSQL hébergée | UE (Francfort) |
| Resend | Envoi des e-mails transactionnels | UE / États-Unis |
| Stripe | Paiements en ligne des clients de l'organisation | UE / États-Unis |
| Cloudflare Turnstile | Protection anti-spam du formulaire d'inscription | UE / États-Unis |
| Google / Microsoft | Synchronisation agenda et contacts — uniquement si l'organisation connecte son compte | UE / États-Unis |
| [à compléter : hostName] | Hébergement de l'application | [à compléter : hostAddress] |
5. Security and confidentiality
[à compléter : entityName] takes appropriate measures to prevent unauthorized access, loss, or alteration. People who can access the data are bound by confidentiality.
6. Data-subject rights
When an organization's client exercises a right, the organization answers. [à compléter : entityName] helps the organization, within the product, export or delete the organization's data.
7. End of processing
When the organization is deleted, the data is erased, subject to retention the law requires (issued invoices, signature evidence). What deletion keeps is shown before you confirm.
8. Acceptance
Acceptance is recorded for the organization, by its owner, with the date and the version of this document. A new version that requires it is shown to the owner before processing continues.
[to be completed: retention periods, transfers outside the EU, audits — with counsel]