WebP Cloud Services values the importance of processing and storing data in a secure, fair, and transparent way. Our data infrastructure is based in a secure location, and we are committed to complying with strong applicable privacy laws.
This Data Processing Agreement (“DPA”) is an addendum to the Terms of Service between WebP Cloud Services and the customer. If you accept this DPA on behalf of a customer, you warrant that you have authority to bind that customer, have read and understood this DPA, and agree to it on the customer's behalf.
These service terms incorporate the DPA when the General Data Protection Regulation (“GDPR”) applies to your use of WebP Cloud Services to process data. We are committed to protecting and securing data to the standards set out here and to taking necessary steps to comply with GDPR and other applicable data protection laws.
Organizational and technical security measures
Our data infrastructure is hosted on renewable-energy-powered servers in Germany and is covered by European Union privacy law. We state that customer data does not leave the EU or EU-owned cloud infrastructure. Information about our hosting provider Hetzner and its server-security certifications is available from Hetzner.
We use HTTPS for data in transit and hashing at rest. Raw IP addresses and user-agent values stored in our database are rendered inaccessible, including to us. Strict firewall rules and private encrypted networking limit data access to authorized personnel. We maintain replicated off-site backups and use strong bcrypt password hashing.
How we handle deletion instructions
You may delete your account and site statistics at any time using the available deletion controls.
When you delete an account or site statistics, the associated data is permanently deleted from our servers immediately and cannot be recovered. This includes user data and statistics stored in our systems.
If you have questions or concerns about deletion, please contact us.