Data Processing Agreement (DPA)

1. Subject matter and duration

PropCheckr processes personal data on behalf of the Customer solely to provide the SaaS platform (case management, document generation, collaboration, connected storage).

Processing duration matches the contract term, then legal retention or purge periods described in the privacy policy.

2. Nature and purposes

Data categories: Customer user identity, case contacts and parties, document metadata, audit logs, billing data.

Purposes: hosting, authentication, document generation and organisation, support, security, billing.

3. PropCheckr obligations

Process data only on documented Customer instructions; ensure confidentiality; implement appropriate technical and organisational measures (RLS, encryption in transit, access control, logging); assist the Customer with data subject requests where possible.

Notify the Customer without undue delay of any personal data breach.

4. Further subprocessors

The Customer authorises PropCheckr to use subprocessors listed at /legal/subprocessors. PropCheckr notifies the Customer of material changes with 15 days' notice; the Customer may object on legitimate grounds or terminate.

5. International transfers

Business data is hosted in the EU. Necessary transfers outside the EU (authentication, payments, AI, email) are covered by SCCs or equivalent safeguards.

6. End of contract

On termination, the Customer has 30 days to export data. PropCheckr deletes or returns personal data unless legally required to retain. See also in-app organisation deletion (14-day reversible grace period).

7. Data protection contact

Questions about this DPA or exercising rights: team@propcheckr.com — Largo Rodrigues Sampaio 37, 4740-218 Esposende.