---
title: "Data Processing Addendum - JobsPipe"
description: "JobsPipe Data Processing Addendum (DPA) for customers subject to GDPR, UK GDPR, and similar regimes."
canonical: https://jobspipe.dev/dpa
---

Legal

# Data Processing Addendum

Last updated: September 27, 2026

## Parties

This Addendum is between JobsPipe (“JobsPipe”) and the customer that accepted the Terms of Service (“Customer”).

## Roles

For personal data Customer submits to the JobsPipe API, Customer is the Controller and JobsPipe is the Processor. For account and billing data we hold about Customer, JobsPipe is the Controller. For personal data that appears in public job postings JobsPipe collects, JobsPipe is an independent controller of its collection and indexing, and Customer is an independent controller of its own use of the results it receives.

## Scope of processing

JobsPipe processes personal data only to provide the service in accordance with Customer instructions and the published API documentation.

## Security measures

JobsPipe maintains technical and organizational measures including: encryption in transit (TLS), access to production restricted to authorized personnel, secrets held outside source code, daily backups, and an incident response process with the breach notice below. A description of these measures is available on request.

## Sub-processors

JobsPipe uses the sub-processors below to run the service. We give Customer prior notice of new sub-processors and a reasonable window to object.

-   **Hetzner Online GmbH** - application hosting and databases (EU)
-   **Stripe, Inc.** - payment processing and billing (USA)
-   **Resend** - transactional email (USA)
-   **Loops** - account lifecycle email (USA)
-   **Axiom, Inc.** - API request logs for debugging and abuse prevention (USA)
-   **Cloudflare, Inc.** - DNS, email routing and network security (USA)
-   **OpenRouter, Inc.** and **Anthropic PBC** - the AI assistant that answers support chat and dashboard questions (USA)
-   **OpenAI, L.L.C.** - search indexing of our help articles (USA)
-   AI model providers that plan agentic searches and rank their results (USA); the current names are available on request.

Website analytics run on a self-hosted Umami instance that JobsPipe operates itself. It sets no cookies and is not a sub-processor.

## International transfers

Where personal data is transferred outside the EEA, UK, or Switzerland, JobsPipe relies on the EU Standard Contractual Clauses (and UK Addendum where applicable), supplemented by the technical measures described above.

## Data subject requests

JobsPipe will, on Customer request and at Customer’s cost, provide reasonable assistance to enable Customer to respond to data subject requests under applicable law.

## Breach notification

JobsPipe will notify Customer without undue delay, and in any event within 72 hours, of a personal data breach affecting Customer data.

## Return or deletion

On termination, JobsPipe will delete Customer personal data within 90 days, except where retention is required by law.

## Audit

JobsPipe will, on reasonable written request and no more than once per year, make available documentation reasonably necessary to demonstrate compliance with this DPA.

## Order of precedence

In the event of a conflict between this DPA and the [Terms of Service](https://jobspipe.dev/terms), this DPA controls solely with respect to the processing of personal data.


---
Try it with no key: `curl -d '{"limit":3}' https://api.jobspipe.dev/v1/sandbox/jobs/search`. AI agents: the full machine-readable index of this site is https://jobspipe.dev/llms.txt?src=md-twin - API quickstart, MCP server, pricing. Free key (1,000 jobs to start): https://jobspipe.dev/signup