Get started
Home / Data Processing Agreement

Data Processing Agreement

Last updated 25 October 2026

This agreement is part of the terms of service. It applies when DOFIES processes personal data for you (the customer, “controller”) while providing the service. DOFIES (the “processor”) is run by ΣΕΛΑ ΒΕΛΕΝΤΙΝ (Veledin Sela), a sole proprietorship trading as DOFIES, Gefyras Papastathi 22, 45332 Ioannina, Greece, VAT number EL176171435.

1. What we process for you

  • Subject and purpose: preparing, storing, publishing and sharing articles, campaign plans and other work for your business, and reporting on them.
  • Data: personal data that appears in news sources and articles (for example names of public figures, quotes), your team members’ names and emails, photos and reports you upload, and the numbers your connected Google and Meta accounts report.
  • People concerned: your team, people mentioned in news, and your readers and customers only as aggregate statistics.
  • Duration: as long as your subscription, then deletion as below.

2. Our commitments (article 28 GDPR)

  • We process the data only on your documented instructions: your settings and actions in DOFIES are those instructions.
  • Everyone at DOFIES with access is bound by confidentiality.
  • We apply appropriate security: encryption in transit (HTTPS) and of connection secrets at rest (AES-256-GCM), separation of each customer’s data, access by role, backups and monitoring.
  • We use the sub-processors listed below, under written terms with the same protections. We tell you before adding or replacing one, and you may object.
  • We help you answer requests from people exercising their rights, and with security and impact assessments where needed.
  • We tell you without undue delay, and within 72 hours, after we become aware of a personal data breach affecting your data.
  • At the end of the service we delete your data within 30 days (backups within 90 days), unless the law requires us to keep it. You can export your articles before.
  • We give you the information you need to show compliance, and allow reasonable audits with notice.

3. Sub-processors

ProviderWhereWhat for
Hetzner Online GmbHGermany (EU)Hosting: our servers and database, where all DOFIES data is stored.
Anthropic, PBCUnited StatesAI work: the public news sources, your business brief and the reports you upload, and the work prepared from them. No passwords or Google user data.
Google LLCUnited StatesSign in with Google; reading your Search Console and Analytics numbers when you connect them; Google Analytics on our website and app, only after a yes to analytics cookies.
Meta Platforms Ireland LtdIreland / United StatesPosting your published articles to the Facebook Page and Instagram account you connect.
Pexels, Unsplash, PixabayEU / United StatesFree stock photos: only a few words describing the photo needed (for example “hospital corridor”).
Stripe Payments Europe LtdIrelandPayments, when you subscribe: card details go to Stripe directly, never to us.
Resend, Inc.United StatesService emails (for example, an article waits for your review), when enabled.
Our email providerEUReplies to the messages you send us.

Transfers outside the European Economic Area rely on the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

4. Contact

Questions about this agreement, or a signed copy for your records: info@dofies.com.

Questions? Write to info@dofies.com or use the contact page.