Legal
Data Processing Agreement
Toster provides a Data Processing Agreement (DPA) to customers subject to GDPR (EU/EEA operations, including Poland, Czech Republic, and Germany).
What the DPA covers
- Nature and purpose of data processing
- Types of personal data processed (customer order data, employee data)
- Data subject categories (end customers, courier staff)
- Duration of processing
- Sub-processor list and commitments
- Technical and organisational measures (TOMs)
- Standard Contractual Clauses (SCCs) for international transfers
How to get the DPA
Email [email protected] with the subject line “DPA Request”. Include your company name and country of registration. We will send the DPA within 5 business days.
Sub-processors
We use the following sub-processors to deliver the Toster platform:
- Railway.app — PostgreSQL database hosting (EU region available)
- Vercel — Web hosting and edge functions (EU regions available)
- Cloudflare R2 — File/media storage (EU regions available)
- SendPulse — Email, SMS, and push marketing (EU-hosted option)
- Stripe — EU payment processing (EU-domiciled entity)
- LiqPay / PrivatBank — UA payment processing
- Anthropic — AI processing via Claude API (US, data processing agreement available)
- ElevenLabs — Voice AI processing (US)