Introduction
Under data protection laws such as the General Data Protection Regulation (GDPR) and similar regulations, a Data Processing Agreement (DPA) is required only when a service provider (Data Processor) processes personal data on behalf of a customer (Data Controller).
Rocketgenius provides Gravity Forms and related add-ons as self-hosted WordPress plugins that our customers install and manage on their own servers.
Reason for Non-Applicability
As a provider of self-hosted software, we do not collect, store, process, or have access to customer data collected when customers submit information via your Gravity Forms. We are a software provider, not a service or SaaS provider, and we do not receive or have access to this data, nor do we have any control over how it is used.
This means that we are not a Data Processor under GDPR or similar regulations. Because of this, we do not maintain or provide DPAs for our customers.
Your Responsibilities
All data entered into a form you host is managed, controlled, and stored according to the website hosting arrangement and server/data setup that you have specified. That means that as a Gravity Forms user, you remain responsible for compliance when collecting and processing personal data using our plugins. This includes:
- Ensuring compliance with applicable data protection laws (e.g., GDPR, CCPA).
- Managing access and security of the data collected using our plugin.
- Implementing appropriate privacy policies for their users.
Other References
For more details on the partners we use and the data we collect during normal business transactions, refer to our Gravity Forms Privacy Policy.
For more information on GDPR compliance when using Gravity Forms, please visit: WordPress, Gravity Forms, and GDPR Compliance.
If you use Gravity Forms for eCommerce transactions and need information on PCI compliance, please refer to:
Is Gravity Forms PCI Compliant?
Please note that the helpful guides we produce here are not a substitute for proper legal advice from properly accredited experts.