Data processing agreement

When I work on your app I can see the personal data your customers keep in it. For that data you are the controller and I, Max Zeshut, Sarmacka 12G, Warsaw, Poland, am your processor. This agreement is part of the terms and applies to every order automatically. Need a signed copy? Email [email protected].

What I process, and why

• Purpose: checking, testing and fixing your app as described in the service you bought.
• Data: whatever personal data is in the systems you give me access to, typically your users' names, emails, account records and files.
• People it's about: your customers and users.
• How long: from when you give me access until you remove it, at the latest when the work is done.

What I promise

• I act only on your instructions: the service you bought and what you tell me in writing.
• I work inside your own accounts, through collaborator access you can see and remove. I don't copy or export your customers' data off your systems. When I need data to test with, I make test records.
• I keep everything I see confidential. I do the work myself; no one else gets access.
• I use no sub-processors for your customers' data. My email (Zoho) only carries our own messages.
• If I become aware of a breach involving your data, I tell you without undue delay, with what I know.
• I help you answer your users' requests (access, deletion) and give you what you need to show compliance, on request.
• I work from Poland and don't move your customers' data outside the EEA.

When the work ends

You remove my access, and you get a list of keys and secrets to rotate. Within 30 days I delete any notes or screenshots that contain your customers' personal data, except what the law requires me to keep.

Last updated 27 October 2026.