v2026-01
Effective: 2026-01-01Last Updated: 2026-09-13
Data Processing Agreement (DPA)
Establishes controller/processor responsibilities for email recipient data submitted via Histeria API.
1. Scope & Processing Roles
This Data Processing Agreement ("DPA") supplements the Terms of Service. Customer acts as the Data Controller and Histeria acts as the Data Processor regarding recipient data processed through the API.
The parties' respective data protection responsibilities depend on the nature of the processing and applicable privacy laws.
2. Security & Subprocessors
Histeria implements technical and organizational measures to safeguard customer data against unauthorized access or disclosure.
A current list of subprocessors utilized by Histeria is maintained at /legal/subprocessors.