Data Processing Overview & DPA Requests
Effective May 11, 2026 · Theta Beta
The Service is operated by Austin Norvilleas an individual. “Theta Beta” is the product name (not a separate legal entity).
Larger teams occasionally require a standalone Data Processing Addendum (DPA). This web page summarizes the relationship at a glance and explains how procurement teams escalate to executed paperwork. It does not constitute a standalone binding DPA unless separately signed by both sides.
Roles
Customers use Theta Beta to store and analyze their brokerage-linked or imported trading data (“Customer Data”).
In GDPR-style language — subject to factual confirmation — you typically act as a data controller for Customer Data.
Austin Norville, operating Theta Beta, typically acts as processor / service provider for Customer Data strictly to deliver the SaaS capabilities you configure.
Processing instructions
You instruct processing by configuring accounts, syncing Tastytrade, uploading exports, syncing schedules, invoking exports/deletion in-product, inviting users (if invited flows exist), etc.
We do not sell Customer Data nor use Customer Data for third-party behavioral advertising presently.
Subprocessors
Infrastructure subprocessors mirror the canonical table in the Privacy Policy §4 (subject to change — material updates should be surfaced through policy revision emails when feasible).
International transfers
U.S.-based hosting is anticipated; supplementary transfer mechanisms may be enumerated in countersigned contractual schedules if required by counsel.
Security
See /security for a plain-language synopsis (not SOC 2 attestation wording).
Obtaining a countersigned DPA
Procurement / legal counsel should email hello@thetabeta.app referencing company legal name, signatory roster, jurisdictions, urgency, regulatory sectors (financial services overlays), and attachment template preference (vendor PDF vs mutual NDA+DPA rider).
No guarantee of immediate acceptance — sole-operator bandwidth — but materially reasonable enterprise requests will queue for review.
Termination & deletion
Deletion horizons align with the Privacy Policy; enterprise schedules may shorten windows if contractually stipulated and engineered feasibly.