Data Processing Agreement

How we process and protect your data as a data processor.

Last updated: July 18, 2025

Scope of Processing

This agreement outlines how GoodOff processes personal data on behalf of users and organizations. We act as a data processor for user-generated content and learning data.

Data Categories

We process the following categories of data:

  • User account information
  • Learning progress and statistics
  • Flashcard content and study materials
  • Usage analytics and performance data

Security Measures

We implement comprehensive security measures:

  • Encryption at rest and in transit
  • Regular security audits and penetration testing
  • Access controls and authentication
  • Incident response procedures
  • Employee training and confidentiality agreements

Sub-processors

We use the following sub-processors:

  • Supabase - Database hosting
  • Vercel - Application hosting
  • Stripe - Payment processing
  • Google Cloud - AI services

Contact

For data processing inquiries:
Email: [email protected]