Data Processing Agreement

Template — to be executed by both parties

1. Roles

You are the Controller. We are the Processor.

2. Subject matter

Processing of session recordings, behavioral telemetry, and account data necessary to provide the WatchTower service.

3. Duration

For the term of your subscription plus 30 days for export.

4. Nature & purpose

Capturing browser-side telemetry via the SDK, transmitting it to our infrastructure, computing frustration analytics, and surfacing alerts in the dashboard.

5. Types of personal data

IP addresses, browser fingerprints, clickstream events, mouse movements, page contents, user IDs you supply, email addresses.

6. Sub-processors

Listed in our Privacy Policy. We notify you 30 days before adding a new sub-processor.

7. Controller obligations

You are responsible for obtaining consent (where required) and providing notice to end users of tracking via the SDK.

8. Processor obligations

We process only on your documented instructions, ensure confidentiality, implement the security measures described in our Security page, and assist with data-subject requests.

Contact dpo@watchtower.example to execute this DPA.