Data processing terms

Last updated 16 October 2026. These terms apply when you use Series Attendance Roster to process attendance data of people who joined your meetings (GDPR Art. 28, UK GDPR, KVKK). A signed copy is available on request.

• Subject matter: archiving and reporting attendance of Microsoft Teams meetings you organize.
• Data subjects: attendees, presenters and organizers of those meetings.
• Personal data: display name, e-mail address, Entra ids, role, join/leave times.
• Instructions: we process only to provide the service as configured by you (series you add, rules, exports, retention).
• Confidentiality and security: encryption at rest and in transit, least privilege, operator-only access, no data in logs.
• Sub-processors: listed below; we give 30 days' notice of changes by e-mail.
• Assistance: we help you answer data subject requests and incidents; we notify you without undue delay (target 72 hours) after becoming aware of a personal data breach.
• Deletion: on removal of a series, on "delete all", or at the end of your retention period.
• Audits: on request we answer security questionnaires in writing.

Sub-processors

• Cloudflare, Inc. (USA) — hosting, database (Workers, D1), global network.
• Resend, Inc. (USA) — sending the monthly summary and service e-mails.
• Paddle.com Market Ltd (UK) — payments as merchant of record (billing data only).