GDPR and customer data processing terms for Masto Control.
For customer production and business data stored in a tenant workspace, the customer is the controller and Masto Control acts as processor. For account, billing, and operational data, Masto Control may act as controller.
Masto Control processes customer data to provide inventory, BOM, production, support, billing, security, backup, and operational services.
Masto Control applies access controls, tenant isolation, authenticated file access, backups, audit logs, and production security settings. Customer media is stored in private, EU-region S3-compatible object storage.
Masto Control uses the following sub-processors to process Customer Data on our instructions:
We will update this list if we add or change sub-processors.
Paddle.com Market Limited ("Paddle") is not a sub-processor of Masto Control. Paddle is the Merchant of Record for your subscription and acts as an independent data controller for the payment and billing data it collects directly from you at checkout (name, email, billing address, payment method details). Paddle processes this data under its own privacy policy — see Paddle's Privacy Policy.
Upon termination, customer data can be exported or deleted according to the agreed retention period and applicable legal obligations.