Data Processing Addendum

This DPA applies when you use FormHeron to process personal data of end users who submit your forms. You are the controller; FormHeron is the processor.

Processing: store submissions, send notifications, deliver webhooks/Slack, provide dashboard access. Location of storage: EU (Amsterdam). Operator access for support may occur from India.

Sub-processors are listed at /legal/sub-processors. Special-category data is prohibited. A formal third-country transfer mechanism (SCCs) is deferred until the first EU-resident paying customer or 5,000 EU-origin submissions/month — see compliance-status.