Last updated: May 2026

This Data Processing Addendum ("DPA") forms part of your agreement with DwellPort and applies whenever DwellPort processes Personal Data on your behalf as a Processor under the GDPR, UK GDPR, CCPA, or equivalent legislation.

Scope of processing

• Subject matter: provision of the DwellPort service.
• Duration: while you have an active subscription, plus retention required by law.
• Nature & purpose: hosting and indexing of resident, owner, vendor, and ALPR data on your instruction; payment processing on your authorization; physical access control on your authorization.
• Categories of data subjects: residents, applicants, owners, vendors, guests, employees of the property-management firm.
• Categories of personal data: names, addresses, contact info, identification, lease terms, payment data (tokenized), license plate text and images, photographs from inspections, audit logs.

Processor obligations

• Process only on documented instructions.
• Ensure personnel are bound by confidentiality.
• Implement appropriate technical and organisational measures (described in the security overview).
• Engage sub-processors only as listed on the trust center, with prior notice of changes.
• Assist with data-subject requests, including ALPR access and deletion requests.
• Notify you of personal-data breaches within 72 hours of discovery.
• Return or delete personal data on termination, subject to legal retention.

ALPR-specific commitments

• State retention caps enforced automatically (CA, NH, ME, VT).
• No facial recognition.
• No sale or sharing of plate data with law enforcement except in response to a valid legal process.
• Per-resident opt-out workflow available where state law requires.

International transfers

Where personal data is transferred outside the EEA, UK, or Switzerland, the EU Standard Contractual Clauses (EU 2021/914) and UK Addendum apply.

Sub-processors

Current sub-processors are listed on the trust center. We will notify you at least 30 days in advance of any new sub-processor.

Audits

We make available the SOC 2 Type II report (when issued) under NDA. Customers paying $30,000+ per year may request an annual audit on reasonable notice.

Execution

This DPA is effective without signature. To request a counter-signed copy, email privacy@dwellport.com.