Data Processing Addendum
Last updated: July 26, 2026
This Data Processing Addendum ("DPA") supplements the Vizeolra Terms of Service and applies where Vizeolra processes personal data on behalf of a customer ("Customer") subject to applicable data protection laws, including the EU/UK GDPR and the CCPA/CPRA.
1. Roles
Customer is the controller (or business) of personal data submitted to the Service. Vizeolra is the processor (or service provider) and processes personal data only on documented instructions from Customer, as set out in the Terms and this DPA.
2. Subject matter and duration
Processing consists of providing the website-building and hosting Service for the duration of the subscription.
3. Categories of data and data subjects
Customer account data; end-user data submitted through published websites (contact/appointment/reservation/quote forms); site analytics. Data subjects include Customer's employees and Customer's own website visitors.
4. Sub-processors
Customer authorizes Vizeolra to engage sub-processors including: Stripe (payments), our email delivery provider, our AI provider, hosting and CDN providers, and our domain registrar partner. We will notify Customer of material changes to sub-processors.
5. Security
Vizeolra implements appropriate technical and organizational measures: encryption in transit, row-level security on tenant data, least-privilege access, secret management, and logging.
6. International transfers
Where personal data is transferred out of the EEA/UK, the parties rely on the EU Standard Contractual Clauses and, where applicable, the UK Addendum, incorporated by reference.
7. Data subject requests
Vizeolra will assist Customer, taking into account the nature of processing, to respond to data subject requests. Customer can initiate requests via support@vizeolra.com.
8. Breach notification
Vizeolra will notify Customer without undue delay after becoming aware of a personal data breach affecting Customer's data.
9. Deletion
On termination, Vizeolra will delete or return Customer personal data within a reasonable period, except where retention is required by law.
10. Audits
Customer may request reasonable information necessary to demonstrate compliance with this DPA, subject to confidentiality.
To countersign this DPA for your organization, email support@vizeolra.com.