Data Processing Agreement

Scope

This Data Processing Agreement (DPA) applies to the processing of personal data by Ninelytics on behalf of customers using the managed cloud service. Self-hosted users act as independent data controllers and this DPA does not apply.

Data processing

Ninelytics processes data solely for the purpose of providing web analytics services. We act as a data processor on your behalf. Data is processed in accordance with your instructions and applicable data protection laws.

Sub-processors

We use the following sub-processors:

• + Infrastructure provider for hosting
• + MaxMind for IP geolocation (country-level only)

Data security

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls, and regular security reviews.

Data subject rights

We assist you in responding to data subject requests (access, deletion, portability) as required by GDPR and other applicable laws. Since Ninelytics collects minimal personal data by design, most requests can be fulfilled without additional processing.

Contact

For DPA-related inquiries, contact info@9thavenue.dev