Data Processing Agreement (GDPR)
Last updated: 25 October 2026
This agreement is part of the Terms of Service. It applies when DOFIES processes personal data for you (the customer, “controller”) while providing the service. DOFIES (the “processor”) is run by Veledin Sela (sole proprietorship, trading as DOFIES), Gefyras Papastathi 22, 45332 Ioannina, Greece, VAT number EL176171435. Contact: info@dofies.com.
1. What we process for you
- Subject and purpose: preparing, storing, publishing and sharing articles for your publication, and reporting on them.
- Data: personal data that appears in news sources and articles (for example names of public figures, quotes), your team members' names and emails, photos you upload, and the numbers your connected Google and Meta accounts report.
- People concerned: your team, people mentioned in news, and your readers only as aggregate statistics.
- Duration: as long as your subscription, then deletion as below.
2. Our commitments (article 28 GDPR)
- We process the data only on your documented instructions: your settings and actions in DOFIES are those instructions.
- Everyone at DOFIES with access is bound by confidentiality.
- We apply appropriate security: encryption in transit (HTTPS) and of connection secrets at rest (AES-256-GCM), separation of each customer's data, access by role, backups and monitoring.
- We use the sub-processors listed below, under written terms with the same protections. We tell you before adding or replacing one, and you may object.
- We help you answer requests from people exercising their rights, and with security and impact assessments where needed.
- We tell you without undue delay, and within 72 hours, after we become aware of a personal data breach affecting your data.
- At the end of the service we delete your data within 30 days (backups within 90 days), unless the law requires us to keep it. You can export your articles before.
- We give you the information you need to show compliance, and allow reasonable audits with notice.
3. Sub-processors
| Provider | Where | What for |
|---|---|---|
| Hetzner Online GmbH | Germany (EU) | Hosting: our servers and database, where all DOFIES data is stored. |
| Anthropic, PBC | United States | AI writing: the text of the public news source and the article being written. No account details, passwords or Google data. |
| Google LLC | United States | Sign in with Google; reading your Search Console and Analytics numbers when you connect them. |
| Meta Platforms Ireland Ltd | Ireland / United States | Posting your published articles to the Facebook Page and Instagram account you connect. |
| Pexels, Unsplash, Pixabay | EU / United States | Free stock photos: only a few words describing the photo needed (e.g. "hospital corridor"). |
| Stripe Payments Europe Ltd | Ireland | Payments, when you subscribe: card details go to Stripe directly, never to us. |
| Resend, Inc. | United States | Service emails (e.g. an article waits for your review), when enabled. |
Transfers outside the European Economic Area rely on the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
4. Contact
Questions about this agreement, or a signed copy for your records: info@dofies.com.