Skip to content
push.et

Data Processing Addendum

Effective 20 August 2026. Governed by the laws of Ethiopia.

This Data Processing Addendum (DPA) forms part of the Terms of Service between you (the controller) and Push.et (the processor) for push.et. It covers personal data you submit through the console or API so we can send traffic and complete KYC.

Subject matter and roles

You determine the purposes of messaging and the KYC documents you upload. Push.et processes that data only to provide push.et: routing SMS and MMS, storing delivery receipts, enforcing STOP, billing the prepaid wallet, and reviewing sender IDs. Account login data (your name and email) is handled under the Privacy Policy, not as processor data.

Categories of data

Processor data includes message content, recipient phone numbers, delivery metadata, opt-out entries, and KYC documents and business identifiers you provide. You must not send special categories of data unless Ethiopian law allows it and you have a lawful basis.

Instructions and security

We process processor data only on your documented instructions (API calls, console actions, and these terms). We apply access controls, encryption in transit, organization scoping, and retention limits described in the Privacy Policy. We will notify you without undue delay if we become aware of a personal-data breach affecting processor data.

Subprocessors

You authorize the following subprocessors. Hosting and email currently run in the United States; payment collection may run in Ethiopia or the United States.

  • Neon — PostgreSQL hosting (United States).
  • Vercel — application hosting and edge delivery (United States).
  • Resend — transactional email (United States).
  • Stripe — card and wallet top-up processing (United States).
  • Chapa — ETB checkout and wallet top-up processing (Ethiopia).

We will remain responsible for subprocessors. A material change will be reflected on this page.

Assistance, return, and deletion

We will assist with data-subject requests that concern processor data, subject to telecom and financial-record retention. When the organization is closed, we delete or return processor data after those retention windows, except where Ethiopia law requires us to keep it.

Questions about this DPA: legal@push-et.com. Other contacts are on the contact page.