Data Processing Addendum (DPA)

Parties and scope

This Data Processing Addendum ("DPA") forms part of the agreement between you and OhMySMTP LTD (company number 13200428), registered in the United Kingdom, in connection with your use of 1zDNS.

Under this DPA, you are the controller (or processor, as applicable), and OhMySMTP LTD is the processor (or subprocessor, as applicable) for personal data processed to deliver the service.

Processing details

We process personal data only on your documented instructions and only as necessary to provide, secure, and support the service, including account management and billing.

For DNS activity, 1zDNS keeps aggregated query analytics only, with retention limited to up to 7 days based on your dashboard settings.

Security and confidentiality

We apply technical and organizational controls appropriate to the risk and ensure persons authorized to process personal data are bound by confidentiality obligations.

Subprocessors

We authorize the following subprocessors for service operation:

• MailPace (mailpace.com) — transactional email delivery
• Fly.io (fly.io) — infrastructure hosting and runtime
• Paddle (paddle.com) — subscription billing and payments

International transfers

Where personal data is transferred internationally, we use appropriate safeguards as required by applicable data protection law.

Assistance and rights requests

We will provide reasonable assistance for data subject rights requests, incident response, and compliance obligations where required by law.

Deletion and return

At the end of services, we will delete or return personal data as required by the agreement, unless retention is required by law.