Data processing agreement

Scope

Personal data of your users, contacts, leads, signers, email recipients, employees (Nano Work), customers (Nano POS) and job applicants (NanoNear HR) that you put into NanoNear, processed only to provide the service.

Our commitments

We process the data only on your documented instructions (your use and settings of the apps).

Everyone with access is bound by confidentiality.

We keep appropriate security measures: encrypted connections, hashed passwords, workspace-level separation enforced on the server, access limited to what support requires, and backups.

We help you answer data subject requests and meet your security and impact-assessment duties, as far as the service allows.

We tell you without undue delay after becoming aware of a personal data breach affecting your workspace.

Sub-processors

Hosting and email delivery (our hosting provider), Stripe and PayPal (billing), Cloudflare (bot protection), Groq (optional AI features). We will give notice before adding a sub-processor, and you may object.

Deletion

When the agreement ends, we delete the workspace data within 90 days, unless the law requires us to keep it. You can export it before then.

International transfers

Where data leaves the country it was collected in, we rely on the safeguards the law provides for that transfer.

Audits

On reasonable request, we provide the information needed to show we meet this DPA.