1. Scope
This Data Processing Agreement ("DPA") applies when you use Hoskes Cloud to host applications that process personal data of your end users, and Hoskes acts as a processor (operador) on your behalf under LGPD.
For account and billing data, Hoskes is the controller as described in our Privacy Policy.
2. Processing instructions
We process personal data only according to your documented instructions as reflected in your use of the Service (deployment configuration, environment variables, and stored data).
3. Subprocessors
You authorize our subprocessors listed in the Privacy Policy. We will inform you of material changes when required by law.
4. Security measures
We implement technical and organizational measures appropriate to the risk, including encryption of sensitive credentials, access controls, and monitoring.
5. Data subject requests
We will assist you in responding to data subject requests where technically feasible, upon your written request to privacy@hoskes.cloud.
6. Deletion
Upon termination of your account, we will delete or return personal data processed on your behalf within a reasonable period, subject to legal retention requirements.
7. Contact
For a signed DPA or enterprise terms, contact legal@hoskes.cloud.
This document is provided for transparency. It does not constitute legal advice. For formal questions, contact our legal team.