Data Processing Addendum

Draft DPA outline for EU/UK Workspace admins (Will persona). Final Art. 28 terms will be issued before paid EU rollout.

Roles

You are the controller of spreadsheet data. Tosa is not designed to be a processor of row contents in v1 because processing stays in-account.

If checkout or a license API is added

Entitlements, consented marketing sends, and webhook ids may sit on a Cloudflare Worker and a mail provider, each with its own terms. Sheet payloads still should not.

Subprocessors

None for sheet contents in this draft. Website hosting, Stripe (payments), and a future transactional mail sender will be named when contracted.

Questions: support@sheetengines.com