Legal
Data Processing Agreement (DPA)
Terms for when Recco processes personal data on your behalf (Customer as controller, Recco as processor).
Last updated: 10 October 2026
1. Scope
This DPA forms part of the Terms of Service and covers personal data in videos, photos, AWB numbers and operator data that Recco processes for the Customer.
2. Instructions
Recco processes data only on the Customer's documented instructions, namely the configuration and use of the service (record, store for the retention period, share via links the Customer creates, delete). Recco tells the Customer if it believes an instruction is unlawful.
3. Confidentiality and access
Recco personnel are bound by confidentiality. Access to metadata is limited to support and operations; playing videos requires time-limited Customer permission, except emergency access which is notified immediately and logged. All access is logged and visible to the Customer.
4. Security
Technical and organizational measures as described in the Privacy Policy, including tenant isolation (Row Level Security), encryption, role-based access control, hash-chained audit logs and encrypted backups.
5. Sub-processors
The Customer gives general authorization for the sub-processors on the Sub-processors page. Recco gives at least 14 days' notice of changes; the Customer may object and terminate without penalty if the objection cannot be resolved. Recco remains responsible for its sub-processors.
6. Assistance
Recco reasonably assists the Customer with data subject requests, impact assessments and consultations with authorities, within the service's features.
7. Incidents
Recco notifies the Customer without undue delay and within 3 × 24 hours of becoming aware of a personal data breach, with the information available on the data affected, impact and remediation.
8. End of service
After the subscription ends the Customer may export data for 30 days. Recco then deletes Customer data, including from backups within the backup retention cycle (30 days), unless retention is required by law.
9. Audit
Recco provides reasonable information to demonstrate compliance, including access logs in the console and a summary of security measures on written request.