Data Processing Agreement

Draft, not yet in force. Last updated 14 October 2026

TODO(Willem): this whole page is a draft for legal review. Fill in every TODO, have it checked, then remove the draft notice and the noindex tag.

This agreement forms part of the Terms of Service between Meterbird and the customer who runs a Meterbird workspace. It applies whenever Meterbird processes personal data on the customer's behalf. It is written to meet Article 28 of the GDPR and the UK GDPR.

TODO(Willem): Meterbird's legal entity, registered address and company number.

1. Roles

• You are the controller of the personal data your apps send to Meterbird: visitor analytics from the tracker, the user IDs and traits you pass to identify(), session recordings if you turn them on, and the customer and payment data Meterbird reads from the services you connect.
• Meterbird is your processor for that data. We process it only to provide the service you signed up for.
• For your own account (the names and email addresses of your workspace members, sign-in sessions and billing), Meterbird is a controller. Our privacy notice covers that data.

TODO(Willem): privacy.html covers only the waitlist today. Extend it to account data before this clause points at it.

2. What we process

• Subject matter and purpose: web analytics, uptime and error monitoring, and revenue reporting for the apps you add to Meterbird.
• Duration: for as long as your workspace exists, within the retention window of your plan. See retention.
• Data subjects: visitors to your apps, your app's signed-in users, and your paying customers.
• Categories of data: random visitor and session IDs (or a daily hashed ID in cookieless mode), pages viewed without query strings, referrer, UTM tags, browser, operating system, device type, country, custom events and their properties, the user IDs and traits you pass to identify(), masked session recordings if enabled, and customer, subscription and payment records read from connected payment providers. IP addresses are used to derive country and screen out bots, and are not stored with analytics data. Only if the customer turns on IP recording for an app, the IP addresses of visitors the customer has identified with identify() are stored as dispute evidence and deleted 13 months after they were last seen; anonymous visitors' addresses are never stored.
• Special categories: none are needed. You agree not to send them in event properties, user traits or page paths.

3. Our obligations

1. We process personal data only on your documented instructions. These terms, your settings and your use of the product are those instructions. If we think an instruction breaks data protection law, we tell you.
2. Everyone at Meterbird who can reach your data is bound to confidentiality.
3. We keep the technical and organisational measures described on our Security & data boundaries page in place, and we do not reduce them while this agreement runs.
4. We help you answer data subject requests. The product can erase one tracked person by the user ID you passed to identify(), and can export a workspace's data.
5. We tell you about a personal data breach that affects your data without undue delay, and within TODO(Willem): 48 or 72 hours of becoming aware of it, with what we know at the time.
6. We help you with data protection impact assessments and consultations with a supervisory authority where they concern our processing.
7. When your workspace is deleted, its data is deleted from the live database at once. Backups that still hold it expire within TODO(Willem): backup retention period.
8. We give you the information you need to show that these obligations are met, and allow audits on reasonable notice. We do not hold a SOC 2 report or an ISO 27001 certificate; answers to security questionnaires come from us directly.

TODO(Willem): audit terms (notice period, frequency, who pays).

4. Sub-processors

You give general authorisation for these sub-processors. We tell you at least TODO(Willem): 30 days before adding or replacing one, and you may object. If we cannot resolve the objection, you may end the agreement.

• Hetzner Online GmbH, Germany. Servers, database and backups. All Meterbird servers run in Hetzner's German data centres.
• Cloudflare, Inc., United States. Sits in front of meterbird.com and app.meterbird.com, so it carries tracker requests and sees visitor IP addresses in transit.
• Resend, United States. Sends sign-in links, alerts, digests and other product email to your workspace members and the alert recipients you add.
• Stripe. Takes payment for your Meterbird subscription. It processes your billing details, not your visitors' data.
• Anthropic, PBC, United States. Only if a workspace owner turns on AI summaries and Ask, which are off by default and only available on paid plans. It receives incident fact texts, the weekly digest's figures and the figures Ask reads to answer a question. Never member emails or individual visitors.

The services you connect to Meterbird (payment providers, hosting platforms, error trackers and others) and the alert channels you add are not our sub-processors: you choose them, and you hold your own agreement with each.

TODO(Willem): confirm each sub-processor's legal entity and its own DPA, and whether backups leave Hetzner (Girder backup destination).

5. International transfers

Your data is stored in Germany. Transfers to sub-processors outside the EEA rely on the European Commission's Standard Contractual Clauses (Module 3, processor to processor) and, where the sub-processor is certified, on the EU–US Data Privacy Framework. For UK data we rely on the UK Addendum to the Standard Contractual Clauses.

TODO(Willem): if a customer outside the EEA needs Meterbird as importer, add Module 2 (controller to processor) by reference. Check each US sub-processor's Data Privacy Framework status.

6. Term and liability

This agreement lasts as long as Meterbird processes personal data for you. Liability under it follows the limits in the Terms of Service.

TODO(Willem): governing law and courts, how a customer signs (accept-in-product or countersigned PDF), and precedence over the Terms.

Contact

Questions about this agreement, or a signed copy: [email protected].