Data Processing

Effective 15 August 2026

1. Who Ermaz is

Ermaz LLC is a limited liability company formed in the State of Wyoming, United States. Write to hello@ermaz.app for anything on this page, including a signed DPA.

2. Roles

Ermaz may act as controller for account, billing and service-administration data, and as processor for customer content handled on behalf of a business customer.

3. Instructions

Processing follows the privacy notice on this site: the enquiries your site collects are processed only to deliver them to you and keep your copy, on the subprocessors listed there. That data is held on Railway infrastructure in the United States; your finished site is served from Netlify. Where a transfer mechanism is required, transfers rely on the Standard Contractual Clauses.

4. Confidentiality and security

Access to production systems is restricted to authorised personnel bound by confidentiality, and is used only to run the service, fix faults and answer your requests. Logins to those systems are not issued to anyone outside Ermaz. Subprocessors are bound by their own published terms and data processing agreements, not by an Ermaz confidentiality agreement, and those terms are listed in the privacy notice.

5. Subprocessors

A signed DPA is available on request by email; it lists the subprocessors named in the privacy notice (Netlify, Railway, OpenAI, Resend, Google and Paddle).

6. Assistance

Ermaz provides reasonable assistance with rights requests, security incidents, assessments and deletion within the scope of the service.

7. Return and deletion

Export is request-based. Email privacy@ermaz.app and Ermaz will export your account data and your product data in a standard machine-readable format, normally within 5 working days, or delete it. That is the same commitment the privacy notice makes. If any data has to be kept after a deletion request because the law or an open security investigation requires it, Ermaz will tell you which data and why.

8. DPA requests

Organizations that require a signed DPA can ask by email at legal@ermaz.app. This page is an overview, not an executed DPA.