Data processing addendum
GDPR-ready data processing.
Public URL's DPA reflects GDPR Article 28 requirements and standard contractual clauses for cross-border data transfer where applicable.
Last updated: July 3, 2026
Scope and roles
Public URL acts as a data processor for the click, device, and location data generated by your links, and as a processor for any personal data your team stores in link metadata or campaign fields.
As a customer, you are the data controller and are responsible for ensuring that your use of the service complies with applicable data protection laws in your jurisdiction.
Sub-processors
We use a limited set of infrastructure sub-processors for hosting, storage, and email delivery. An up-to-date list of sub-processors is available on request.
We will notify you of any changes to our sub-processor list with at least 10 days' notice so you may raise objections before the change takes effect.
Requesting a signed DPA
Business and Enterprise workspaces can request a countersigned DPA from our team. Please include your workspace name and billing email when reaching out.
Build the link layer
your campaigns need.
Create branded links, route every visitor to the right destination, and keep attribution connected from click to conversion.