Version 2026-09-12 · Effective 2026-09-12
This page is a structural draft prepared ahead of legal counsel review. It is not yet legally binding and must not be relied on until counsel approves a final version.
Data Processing Agreement
Roles
For data you submit through your hosted servers and account, you act as the data controller and Plex Host acts as the data processor under this agreement.
Subject Matter and Duration
This agreement covers the processing described in our Privacy Policy for as long as your account remains active, plus the retention periods listed there.
Sub-processors
We rely on the same sub-processors listed in our Privacy Policy: Clerk, Stripe, Resend, Twilio, Cloudflare R2, and Sentry (when enabled).
Security Measures
We apply encryption in transit and at rest for stored secrets, role-based access control scoped to teams, and audited administrative actions.
Data Transfers
[Placeholder — cross-border transfer mechanism (e.g. standard contractual clauses) to be confirmed by counsel.]
Deletion on Termination
On termination of your account, we delete or anonymize your data according to the retention periods in our Privacy Policy.