If you are a business controller, we provide a DPA that governs the processing of personal data in the service.

• Purpose. Operation of Flikker, including projects, milestones, payout timing and support.
• Sub-processors. Stripe for payments, Supabase for app data, and PostHog EU for analytics, which is optional.
• Security. Encryption in transit, role based access, least privilege, regular backups, and audited access.
• Data subject rights. We assist the controller in fulfilling access, correction, and deletion requests.
• International transfers. Based on sub processor safeguards and standard contractual clauses where required.

If you need a signed DPA and a current sub processor list, contact support for a counter signed copy.