Data Processing Agreement

Wicked Smart HQ is primarily a consumer product, and most users do not need a signed Data Processing Agreement (DPA). If you process personal data on behalf of a business (e.g. a small organisation using HQ for coordination) and your internal policy or a contract requires a DPA in place with each processor, we can provide one on request.

Email hello@wickedsmarthq.com with the subject DPA request, the legal entity name, a point of contact, and a brief description of how your team uses the product. We'll send back a copy of our template DPA, aligned with the EU Standard Contractual Clauses where applicable, for countersignature.

Our Privacy Policy already documents the processors we rely on (Supabase, Stripe, Resend, Open-Meteo, fal.ai, Anthropic, PostHog, Sentry, Vercel) and the sub-processor list we keep current. A DPA does not replace that list; it formalises the obligations we already owe you under the applicable privacy laws.