Data Processing Agreement

This agreement is part of the Terms of Service and applies when Peura, LLC (Delaware, United States) processes personal data of an operator's guests on the operator's behalf.

The operator is the controller of guest booking data and Peura is the processor. Peura is a separate controller for account, billing, security, and product analytics data, as described in the Privacy Policy.

Data subjects are the operator's guests and booking participants. The data is contact details, booking and guest details, answers to booking questions, pickup, waiver, and check-in status, and payment identifiers and amounts.

Peura processes this data to provide hosted booking pages, widgets, checkout, guest emails, guest self-service links, dashboard operations, reports, exports, and check-in, for as long as the operator's workspace is active.

Peura processes guest data only on the operator's documented instructions, which are these terms and the operator's use of the product, unless the law requires otherwise.

People at Peura with access to guest data are bound by confidentiality.

Peura helps the operator respond to guest requests to access, correct, export, or delete their data, including through the guest self-service tools the operator can enable.

Peura will notify the operator without undue delay, and where feasible within 72 hours, after becoming aware of a personal data breach affecting the operator's guest data.

On request, Peura provides the information reasonably needed to demonstrate compliance with this agreement.

Peura uses tenant-scoped application access with database row-level security, encryption in transit, hashed credentials, expiring secure guest links, rate limiting on public endpoints, redaction of personal fields in error reports, and operational monitoring and alerting.

The operator authorizes Peura to use the following subprocessors to deliver the service: Vercel (hosting and infrastructure), Neon (database), Stripe (payments and billing), Resend (transactional email), Upstash (request rate limiting), Inngest (background job processing), Sentry (error monitoring), and PostHog (product analytics).

Smartwaiver (digital waivers) is used only for workspaces whose owner connects a Smartwaiver account.

Peura requires its subprocessors to protect the data to a comparable standard. This list is updated when Peura changes providers, and workspace owners are emailed before a new subprocessor is added so they can object.

Guest data is processed in the United States. For data from the EU, UK, or Switzerland, Peura relies on the transfer safeguards offered by its subprocessors and will enter into Standard Contractual Clauses with an operator on request.

The operator can export bookings and customers as CSV at any time. After a workspace is closed, Peura deletes or anonymizes its guest data within 90 days, except records that must be kept for legal, tax, or payment-dispute reasons.