Data Processing Agreement

The customer is the data controller, and alg acts as a processor on their behalf. In any conflict regarding the processing of personal data, this agreement prevails over the Terms of Use.

alg processes personal data on the customer behalf solely to provide the service (accessibility setup, delivering the Widget, support, and subscription management), in accordance with the customer documented instructions, for the duration of the engagement.

The data includes contact and account details (name, email), site configuration details, and basic technical data (IP address, browser type). Data subjects are the customer representatives, account holders, and where relevant, Customer Site visitors. Sensitive data will not be processed without written consent and appropriate safeguards.

alg will process data only on documented instructions and as required by law, ensure the confidentiality of authorized personnel, implement appropriate security measures, and not process the data for its own purposes, except as required to provide the service or by law.

The customer authorizes the use of sub-processors (including Cloudflare for hosting and storage, Lemon Squeezy for payments, and subject to consent Google, PostHog, and Sentry). alg will impose data-protection obligations no less protective than those in this agreement and remains responsible for their performance.

alg applies access control, encryption in transit (TLS), storage in a managed database (Cloudflare D1), logging, monitoring, and backup. On becoming aware of a security incident affecting the data, it will notify the customer without undue delay and reasonably assist with handling and reporting.

Sub-processors may process data outside Israel, including in the US and the EU, subject to an appropriate legal mechanism (such as EU Standard Contractual Clauses) and to the Protection of Privacy Law and its regulations.

Upon termination of the service, and at the customer choice, alg will delete or return the personal data processed on their behalf and delete existing copies, except data it is required to retain by law.

This agreement is subject to the Protection of Privacy Law, 1981 (including Amendment 13) and its regulations, and to the GDPR insofar as it applies to the processing of EU data subjects data.

To request a signed copy of the Data Processing Agreement, or for any question, contact info@il-alg.com.