Legal
Data Processing Agreement
This agreement applies when you use Pop Dispatch hosted services from The Pop Street and we process personal information on your behalf. It covers the license server your installed copies call, Pop Vault encrypted backups, and the hosted shop for Pop Commerce subscriptions. Website design projects and other studio work sit outside this agreement unless we agree separately in writing.
Last updated: November 4, 2026
Roles
You are the controller of personal information your organization puts into Pop Dispatch, Pop Vault, or your hosted shop (for example driver names, customer records, or backup contents). The Pop Street is the processor for that information when we host those services for you. We process it only to provide and secure the services, as described in our Privacy notice, these terms, and your documented instructions (including support requests sent through Support).
Subject matter and duration
Processing lasts for your subscription or trial period and for any retention described in the Privacy notice (for example Pop Vault download windows after a plan ends). Categories of data subjects include your staff, drivers, and customers whose details you store in the apps. Categories of personal data include identifiers, contact details, operational records you enter, device and activation metadata, and encrypted backup payloads.
Our instructions
We process personal information only on your instructions as controller, except where applicable law requires otherwise. Standard instructions include running the license server, storing Pop Vault files, operating the hosted shop, sending service messages about those services, and maintaining security and backups of our infrastructure.
Confidentiality
Our personnel with access to hosted service data are bound by confidentiality obligations. Access is limited to what is needed to operate, support, and secure the services.
Sub-processors
We use infrastructure and delivery providers (hosting, email, payment processing where checkout touches your account, and network protection). The current list is maintained by us and available on request through Support. We remain responsible for sub-processors under this agreement and will notify you of material changes where the law requires.
Security
We apply technical and organizational measures appropriate to the risk, including encryption in transit (TLS), access controls, separation of customer environments, monitoring, and regular updates to hosted components. Pop Vault files are encrypted by your apps before upload; we store ciphertext we cannot decrypt.
Personal data breaches
If we become aware of a breach affecting personal information we process on your behalf, we will notify you without undue delay and provide information we reasonably have available to support your obligations as controller.
Deletion and return
When your subscription ends or you ask us to delete hosted data, we delete or return personal information in line with the Privacy notice and product behavior (for example Pop Vault deletion after the download window). You may export from the apps while your license is active.
Audits and information
We make available information needed to demonstrate compliance with this agreement and allow audits mandated by law, subject to reasonable notice, confidentiality, and minimal disruption to other customers.
International transfers
Hosted services may be operated from the United States and other countries where our providers work. Where European data protection law applies to transfers, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses where required.
Contact
Questions about this agreement or processing under it: use Support. For general privacy rights, see the Privacy notice.
The Pop Street.