Data processing agreement
This agreement applies when a service provider (the provider) uses QuoteGuide to collect data from its buyers. It forms part of the terms of use.
Parties and roles
The provider is the controller of its buyers' data. Otter Lake B.V., Ben van Meeredonkstraat 235, 1087 LN Amsterdam, the Netherlands, KvK 94455716, VAT NL866784111B01, is the processor.
Data and purpose
Otter Lake processes the buyer's name, email address, answers to the wizard and uploaded photos. Otter Lake processes this data only to show the quote, store it, and send it to the provider and the buyer, on the provider's instructions.
Subprocessors
The provider agrees to these subprocessors:
| Name | Purpose | Region |
|---|---|---|
| Supabase | Database, sign-in and file storage | EU (Ireland, eu-west-1) |
| Vercel | Hosting of the wizard and the dashboard | Vercel Inc., United States |
| Resend | Quote and lead emails | EU (Ireland, eu-west-1) |
| Anthropic | The text a buyer types into the AI shortcut of the wizard | United States |
Otter Lake tells the provider before it adds a subprocessor.
Security
Data travels over TLS. Row-level security in the database separates providers. Buyer photos are in a private bucket and open only through links that expire. Only Otter Lake staff who need access for support can reach the data.
Breach notice
Otter Lake tells the provider within 48 hours after it learns of a personal data breach.
Deletion
When the provider leaves QuoteGuide, Otter Lake deletes the provider's data within 30 days, unless the law requires longer storage.
Audit
On request, Otter Lake gives the provider the information it needs to check this agreement. Write to hello@otterlake.co.