Webalytics Data Processing Agreement
Last updated: April 11, 2026
This Data Processing Agreement ("DPA") forms part of the Webalytics Terms
of Service between IPX LLC ("Processor")
and the customer ("Controller").
1. Definitions
- Controller: The customer determining how data is processed
- Processor: IPX LLC processing data on behalf of the Controller
- Data Subjects: Website visitors
- Personal Data: Any information identifying a person
- Processing: Any operation performed on data
2. Roles and Responsibilities
The Controller is responsible for lawful data collection and disclosure.
- Include Webalytics in your privacy policy
- Obtain necessary consent
- Ensure lawful basis for processing
- Do not send identifying data (names, emails, etc.)
IPX LLC acts only as a processor and follows Controller instructions.
3. Nature and Purpose of Processing
Data Subjects
Visitors to your website
Personal Data
- Pseudonymous visitor and session IDs
- Page paths and referrers
- Device, browser, OS (derived)
- Viewport, scroll depth, clicks
- Form interactions and navigation paths
- Conversion signals and UTM data
- Custom events
Special Categories
No sensitive data is intentionally processed.
Purpose
- Analytics dashboards and reporting
- Service operation and delivery
Duration
For the duration of your account + up to 90 days after deletion.
4. Controller Instructions
We process data only based on your instructions and will notify you of any legal concerns.
5. Security Measures
- HTTPS/TLS encryption
- API key authentication
- Access controls
- Hashed passwords
- Logical data separation
6. Confidentiality
Authorized personnel are bound by confidentiality obligations.
7. Sub-Processors
- Stripe: Payment processing
- MongoDB Atlas: Data storage
We notify you of changes and impose equivalent protections.
8. Data Subject Rights
Requests are forwarded to you. We assist where technically feasible.
9. Data Breach Notification
We notify you within 72 hours of confirmed breaches and provide required details.
10. Data Deletion
Data is deleted within 90 days after termination unless required by law.
11. Audits
You may request compliance information once per year.
12. Governing Law
Same as the Webalytics Terms of Service.
13. Contact
IPX LLC |
contact@ipxllc.net