Data Processing Addendum
Last updated August 13, 2026
This Data Processing Addendum ("DPA") applies where PixelForge Cloud LLC processes personal data on your behalf as a processor under the GDPR, UK GDPR, or similar laws. It forms part of the Terms of Service for customers subject to those laws.
1. Roles of the parties
For personal data contained in Customer Content, you are the controller (or processor acting for your own customers) and we act as your processor. Each party will comply with its obligations under applicable data-protection law.
2. Scope & instructions
We process personal data only to provide the Services and in accordance with your documented instructions (including as configured through the control panel), unless legally required to do otherwise. The subject matter, duration, nature, and purpose of processing are the provision of the Services; the data subjects and categories of data are those you choose to store.
3. Confidentiality & security
We ensure that personnel authorized to process personal data are bound by confidentiality, and we implement appropriate technical and organizational measures to protect it (see the Privacy Policy, Section 6).
4. Sub-processors
You authorize us to engage sub-processors to provide the Services — including providers of cloud infrastructure, domain registration, SSL certificates, email, DNS and network security, payment processing, and email delivery. A current list of our sub-processors is available to customers on request. We impose data-protection obligations on sub-processors and remain responsible for their performance. We will give notice of material changes to our sub-processor list.
5. Data-subject requests & assistance
Taking into account the nature of the processing, we will assist you with data-subject requests and with your obligations around security, breach notification, and data-protection impact assessments, including through the self-service export and deletion features in the Services.
6. International transfers
Where personal data is transferred across borders, we rely on appropriate safeguards such as the Standard Contractual Clauses, together with any supplementary measures required.
7. Return & deletion
On termination, and at your choice, we will delete or return personal data processed on your behalf, subject to any legal retention requirement, and delete existing copies on our normal schedule.
8. Audits
We will make available information reasonably necessary to demonstrate compliance with this DPA. Audit requests can be arranged by contacting [email protected].