Data Processing Addendum

For customer-controlled business data, the customer is the controller and Probe acts as processor. Probe may act as controller for account, billing, security, analytics, and service administration data.

Probe processes personal data only to provide, secure, support, measure, and improve the services, or as otherwise documented in an order form, product setting, or written customer instruction.

Probe may use subprocessors for hosting, authentication, payments, analytics, communications, AI model access, observability, and support. A production DPA must include the live subprocessor list and update notification process.

Probe will maintain reasonable administrative, technical, and organizational safeguards, including encryption in transit, access controls, audit logging, secrets handling, vulnerability response, and incident notification procedures.

On termination or verified request, Probe will delete or return customer personal data unless retention is required by law, billing, dispute, security, or legitimate backup obligations.