Data Processing Agreement (DPA) — Kynna
Kynna's Data Processing Agreement, available self-service on every plan. Hosted in France, sub-processors listed, GDPR rights.
Hosting and sub-processors
Kynna's application data and encrypted backups are hosted in France, on Scaleway, Paris region. A signed Data Processing Agreement is available self-service on every plan, including the free one — no sales conversation required.
Sub-processors are named, with what is sent to each:
- Scaleway (France, EU) — hosts the application server and encrypted backups.
- OpenAI (USA) — generates questions and analyses open-text answers. Payloads are not used to train the models.
- Stripe (USA / Ireland) — payments. Kynna never sees a card number.
- Resend (Germany / USA) — transactional email.
- Google (USA) — optional sign-in via Google OAuth.
- Sentry (Germany, EU region) — error monitoring, with personal data stripped before sending.
- PostHog (EU region, Frankfurt) — product analytics, loaded only after explicit consent.
Your rights
Full account export (portability), account and response deletion (erasure), and rectification. Survey responses are anonymous by default: respondents are never asked to create an account.
The full legal text is rendered by the application.