Data processing terms

Roles and instructions

The customer determines the purposes and means of processing support content and is responsible for its lawful collection. WebSuitable Inc processes that content to provide Supportside under the customer's documented instructions, including workspace configuration, authorized support actions, export, and deletion. If we consider an instruction incompatible with applicable data protection law, we will inform the customer.

Scope of processing

Processing lasts while the workspace exists and during the documented deletion and backup lifecycle. It includes receiving, storing, retrieving, transmitting, organizing, exporting, and deleting support information. Data subjects include customers, website visitors, and teammates. Information can include contact details, messages, page context, internal notes, and files. The service is not designed for information requiring specialized regulatory safeguards that have not been agreed with us.

Confidentiality and safeguards

We restrict access to authorized personnel and service providers, apply confidentiality obligations, and use scoped workspace permissions, private file storage, authenticated delivery, encrypted transport, and protected operational credentials. Customers remain responsible for their own access configuration and devices. We provide information reasonably needed to assess these safeguards without disclosing other customers' information or security credentials.

Subprocessors and transfers

The customer authorizes the listed infrastructure and service subprocessors. We engage them under contractual data protection obligations appropriate to their work and remain responsible for our obligations under these terms. The current list describes their purposes and processing locations. We will give advance notice of a material new subprocessor so the customer can raise a reasonable data protection objection before the change applies to its content.

Where applicable law requires safeguards for international transfers, we use the applicable provider agreements and transfer mechanisms. The Canada Central database region does not establish that all processing stays in Canada. Contact help@supportside.app for relevant contractual information; these terms do not claim a compliance certification.

Assistance and incidents

We assist authorized customers with access, correction, export, restriction, and erasure requests and with information reasonably needed for applicable security assessments and regulatory duties. Requests go to help@supportside.app. We verify scope and authority before disclosure and protect other individuals' data.

If we become aware of a personal data breach affecting customer content, we notify the affected customer without undue delay and provide available information needed to investigate and meet its obligations. We preserve relevant evidence, limit unnecessary disclosure, and cooperate on remediation.

Return, erasure, and records

Owners can export workspace records and download files before ending use. Owner-requested deletion removes active workspace files and database records after the seven-day cancellation window and cleanup. Provider backups and required legal records follow their documented lifecycle and remain protected. Erasure instructions are reapplied before a recovery copy is used to resume service. We maintain the operational records needed to demonstrate and administer these obligations.