Legal

Data processing agreement (DPA)

Last updated: September 2026

This data processing agreement (« DPA ») supplements the Terms and the Privacy Policy when you use Pathly for your organisation’s data. It describes processing under Article 28 GDPR.

For your organisation’s data (Ping, Flow and Chain configuration, logs, captures, workspace billing), you are the controller. Elerine, which markets Pathly, acts as processor: it uses that data only to run the service, on your documented instructions.

Subprocessors: Google Cloud, region europe-west1 (Belgium), for hosting and processing; Cloudflare for DNS, CDN, WAF and access; Stripe for paid-plan payments. We will not add one without informing you.

Flow screenshots and failure videos stay in the European Union (same europe-west1 region). They are never sent to an AI model. The on-demand failure explanation, if you trigger it, sends only masked textual facts, never the media — details are in the Privacy Policy.

Retention of logs, runs and media follows your plan. Billing data follows accounting rules. At the end of the contract we delete or return organisation data, except legal archives.

For an instruction, a reasonable audit right or a deletion request: privacy@pathlyhq.com.