Data processing agreement (dpa) — Fathom Analytics

Cited by

Facts read from this source

• DPA last updated Report an error

  “Fathom Analytics Data Processing Agreement Last updated: June 20, 2025”

• DPA operator entity Report an error

  “The Service is operated by Conva Ventures Inc. (“us”, “we”, or “our”).”

• DPA GDPR applicability Report an error

  “The Data Processing Terms apply only when you, as a subscriber to the Service: is subject to Regulation 2016/679 The General Data Protection Regulation (“GDPR”)”

• DPA personal data categories Report an error

  “This is limited to IP address and User-Agent.”

• DPA ip temporary storage Report an error

  “we temporarily store the IP address & User Agent of data subjects to keep count of traffic the Service receives, in order to protect the Service and prevent DDoS attacks.”

• EU ip anonymization Report an error

  “ensure that EU data subjects’ IP Address is processed and anonymized (via one-way SHA256 hashing with salt) on EU servers (EU Isolation), operated by BunnyWay d.o.o. (an EU company), before it reaches any of our US-controlled infrastructure.”

• DPA breach notification Report an error

  “in case of a personal data breach, notify you without undue delay after becoming aware of the personal data breach”

• DPA government access requests Report an error

  “Unless prohibited by law, notify you of government access requests, and only disclose personal data to government authorities or third parties when strictly necessary to comply with a legally binding request.”

• DPA audits Report an error

  “security audits and inspections will be performed through an independent third party”

• DPA notice period Report an error

  “We will provide 14 days notice of any plans to change an existing or add a new sub-processor.”

• DPA retention Report an error

  “we do not process, including storing, any personal data we process on your behalf, for longer than 24 hours. Should your account expire or the Terms and Conditions otherwise terminate, all personal data will be automatically deleted within 24 hours.”

• DPA governing law Report an error

  “These Terms are governed in accordance with the laws of the Province of British Columbia and the federal laws of Canada applicable therein.”

• Bunnyway Report an error

  “BunnyWay d.o.o. Content Delivery Network Slovenia”

• Aws Report an error

  “Amazon Web Services, Inc. (AWS) Infrastructure hosting USA* (non-EEA data subjects)”

• Aws eea restriction Report an error

  “*AWS is only used for processing of personal data for data subjects outside of the EEA.”

• Free trial Report an error

  “Start a 7-day free trial for Fathom Analytics today”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Agency Developer Consent-free operation & data minimisation
• The Agency Developer Data access, export & self-hosting
• The Agency Developer European sovereignty
• The Data Protection Officer Consent-free operation & data minimisation
• The Data Protection Officer Data access, export & self-hosting
• The Data Protection Officer European sovereignty
• The E-Commerce Marketing Lead Consent-free operation & data minimisation
• The E-Commerce Marketing Lead Data access, export & self-hosting
• The E-Commerce Marketing Lead European sovereignty
• The Growth Analyst Consent-free operation & data minimisation
• The Growth Analyst Data access, export & self-hosting
• The Growth Analyst European sovereignty
• The Public-Sector Site Owner Consent-free operation & data minimisation
• The Public-Sector Site Owner Data access, export & self-hosting
• The Public-Sector Site Owner European sovereignty
• The Skeptic Consent-free operation & data minimisation
• The Skeptic Data access, export & self-hosting
• The Skeptic European sovereignty