GDPR Compliance
Last updated: October 10, 2026
1. Roles
Under the General Data Protection Regulation (GDPR), Yapidesk acts as a Data Processor for the project and financial data you enter into our systems. You, the customer, are the Data Controller.
2. Data Subject Rights
You have the right to access, rectify, port, and erase your personal data. To exercise these rights, email [email protected]. We will respond within 30 days.
3. Subprocessors
We use trusted third-party subprocessors for hosting (AWS), payment processing (Stripe), and transactional emails (Postmark). All subprocessors are bound by strict DPAs.
4. DPA Requests
If you require a signed Data Processing Agreement (DPA), please download our standard DPA template from your dashboard settings, sign it, and return it to [email protected].