Legal
Last updated June 29, 2026
This Data Processing Addendum (“DPA”) describes how Kapturi LLC (“Kapturi”, the processor) handles personal data on behalf of the Customer (the controller) when delivering FACTYN. It forms part of our Terms of Service. If your organization needs a countersigned copy, email support@kapturi.com.
The Customer is the controller of the personal data it puts into FACTYN (mainly its users' account details and the operator names attached to production records). Kapturi processes that data only as a processor, to provide the Service.
We process Customer personal data only on the Customer's documented instructions — which include using the Service's features — and as required by applicable law. We will not use it for our own purposes or sell it.
Personnel authorized to process Customer data are bound by confidentiality obligations.
We apply appropriate technical and organizational measures, including: encrypted transport (HTTPS), hashed passwords, tenant isolation enforced in the application layer with PostgreSQL row-level security as a second layer, role-based access, and audit logging of administrative actions.
We use a limited set of sub-processors to run the Service, currently: Vercel Inc. (application hosting, USA), Supabase Inc. (managed PostgreSQL database, USA), and an email-delivery provider for transactional email. They are bound by data-protection terms consistent with this DPA. We'll give notice of material changes to our sub-processor list on request — see also the Privacy Policy.
We assist the Customer in responding to data-subject requests. Customers can export their data from Settings and request deletion at any time; on account closure we delete or anonymize Customer data within a reasonable period, save for limited legally-required records.
Where data is transferred across borders, we rely on appropriate safeguards (such as standard contractual clauses) as required by applicable law.
If we become aware of a personal-data breach affecting Customer data, we will notify the Customer without undue delay and provide the information reasonably needed to meet its obligations.