Data Privacy and GDPR Compliance



Suhep is committed to protecting your data and your customers' data.

Data We Collect



From You (Account Holder):
  • •Name, email, business name
  • •Billing information (processed by Stripe, not stored by us)
  • •Support content (articles, tickets, replies)


    • From Your Customers:
  • •Name and email (when submitting tickets)
  • •Support conversation content
  • •IP address and basic device info


    • Data Storage



  • •All data is encrypted at rest and in transit (TLS 1.3)
  • •Hosted on secure infrastructure with SOC 2 controls
  • •Data centers located per your region preference


    • GDPR Compliance



    Suhep supports GDPR requirements:
  • •Right to Access — export all customer data on request
  • •Right to Deletion — delete customer data permanently
  • •Data Portability — export in standard formats (JSON, CSV)
  • •Consent — your support forms should include consent language


    • Your Responsibilities



    As the data controller, you must:
  • •Include privacy policy links on your support forms
  • •Respond to customer data requests
  • •Configure data retention policies


    • Data Processing Agreement



    Business plan customers can request a DPA. Contact support@suhep.com.