Data Processing Agreement

Why a DPA is often unnecessary — and always available

Because DisplayPulse processes video on-device and discards it immediately, the data that reaches our cloud dashboard is anonymous and aggregate — counts, demographic bands, dwell and attention metrics — rather than personal data in most deployments. Many customers therefore find a full DPA is not strictly required for the measurement data itself.

That said, we recognise that account and contact data, and some customer compliance frameworks, still call for a formal agreement. A DPA is available on request for any customer who needs one.

What the DPA covers

• The categories of data processed on your behalf (device telemetry, aggregate measurement data, account/contact data).
• Our role as processor for account-level data, and confirmation that on-device measurement data is anonymised before transmission.
• Sub-processor disclosure for any infrastructure providers used to run the DisplayPulse dashboard and cloud services.
• Security measures, including edge processing and discard-after-analysis for video, and standard technical/organisational safeguards for account data.
• Data retention terms consistent with our Privacy Policy — retained while subscribed, 90-day grace period on lapse.

Requesting a DPA

Get in touch through our contact page and mention that you need a DPA — we'll send the current version for your legal team to review and countersign.