Data Processing Agreement

Last updated: 2026-11-13

This agreement applies when SecuryTik handles personal data on your behalf — for example data about your own subscribers, users or devices in SAMM or SOVA. It is part of our Terms of Service and applies automatically to every customer; no signature is needed. If you need a signed copy, write to privacy@securytik.com.

1. Roles

You (the customer) are the controller of your subscribers' and users' data. SecuryTik is your processor: we handle that data only to provide the services below, only on your instructions, and never for our own purposes.

2. When we handle your data

• Support and remote access — when you give us access to your SAMM, SOVA, server or router to investigate a problem. We look only at what the problem needs. Write actions need your approval for that case.
• Error reports — an error report from your install may contain names, usernames or addresses involved in the error.
• Mobile app notifications — notifications your SAMM sends to the SAMM mobile app pass through our relay to Google/Apple to reach the phone. We do not store their content.
• Server setup — when you order a server from us, we build it and hand it over; we keep no copy of your data afterwards.

Data involved can include subscribers' names, usernames, phone numbers, addresses, plans, payments and network usage — whatever you store in your install. You decide what you store.

3. Our commitments

• We process the data only on your documented instructions, including these terms and your support requests.
• Everyone at SecuryTik who can see it is bound by confidentiality.
• We protect it with appropriate security: encrypted storage of access details, private-network and two-factor access for staff, HTTPS, and access logs.
• We help you answer your subscribers' requests (access, correction, deletion) and with security or impact assessments, as far as our role allows.
• We tell you without undue delay, and within 72 hours of finding it, about any breach that affects your data.
• When a support case or service ends, we delete the access details and any copies of your data we hold, except what the law requires us to keep.
• We give you the information you reasonably need to check that we keep these commitments.

4. Sub-processors

We use the service providers listed in our Privacy Policy (hosting, network, email, messaging, AI and payment providers), each bound by data-protection terms at least as strong as these. We will announce changes to this list on that page; you may object to a new provider for good reason.

5. International transfers

Our servers are in the European Union (Germany). Where data is processed outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or another safeguard the law allows.

6. Your responsibilities

You confirm that you collect your subscribers' data lawfully, tell them how you use it, and have the right to let us handle it as described here.

7. Contact

privacy@securytik.com · SecuryTik, Beirut, Lebanon.