Sub-processors

To deliver the Odaq platform, Digital Peax OÜ engages the third-party sub-processors listed below. Each processes personal data on our behalf, only on our documented instructions, and is bound by a data processing agreement with confidentiality and security obligations consistent with Art. 28 GDPR. This page complements our Privacy Policy.

1. Current Sub-processors

Transfer mechanisms. Where a sub-processor is in the United States, the transfer is protected either by the provider's certification under the EU–US Data Privacy Framework (adequacy decision of July 2023) or by Standard Contractual Clauses (Module 2, controller-to-processor), supported by transfer impact assessments where appropriate. See Section 5 of our Privacy Policy for details.

2. Connected Platforms (Data Sources)

When you connect a marketing platform — Google Analytics 4, Google Ads, Google Search Console, Google Tag Manager, Meta Ads, or Ahrefs — you authorise Odaq to read data from that account. These platforms are data sources you control, governed by your own agreement with each provider, rather than sub-processors we engage to provide the service. You can disconnect any of them at any time from your project settings to revoke access.

3. Changes & Notice

We keep this list current. Before we add a new sub-processor or materially change an existing engagement, we commit to giving at least 30 days' advance notice to registered users (by email or in-app notice), so you have the opportunity to object before the new sub-processor begins processing your data. If you object and we cannot reasonably accommodate the objection, you may terminate your use of the affected service.

4. Questions