Data processing agreement
Supermetry Cloud is not live yet, so there is no customer data to process today. We will publish the data processing agreement before Cloud launches.
Last updated 12 October 2026
Self-hosting needs no DPA
When you run Supermetry on your own servers, Yupcha never receives your analytics data, so no data processing agreement with us is needed. The software sends nothing back to Yupcha.
What the Cloud DPA will cover
- Yupcha as processor, acting only on your documented instructions, with you as controller of your visitors' data.
- Hosting of Cloud customer analytics data in the EU.
- A published list of sub-processors, with notice before we add one.
- Security measures, confidentiality of staff, breach notification, and help with data subject requests.
- Deletion or return of your data when your account ends.
- Standard Contractual Clauses where data leaves the EU, for example for support access from India.
Supermetry is built to collect less in the first place: no cookies, no raw IP addresses stored, and visitor identifiers based on a daily salt that is deleted after about 48 hours.
Request a copy
If you are evaluating Supermetry Cloud and need the draft agreement for review, write to contact@yupcha.com.