Data Processing Addendum

Last updated: 19 May 2026

Where your data lives

All Warka data — your account, your documents, your family members, your reminders — is stored in Hetzner Online GmbH datacenters in Falkenstein and Nuremberg, Germany. These datacenters are ISO 27001 certified. EU privacy law (GDPR) governs the storage of your data.

Subprocessors

The following service providers may process limited categories of your data on our behalf:

• Hetzner Online GmbH (Germany) — hosting and object storage
• Resend, Inc. (USA) — transactional email delivery (sign-in codes, expiry reminders, share notifications)
• Cloudflare, Inc. (USA / global) — DNS and CDN/edge protection for warka.pk
• Google LLC (USA) — Firebase Cloud Messaging push notifications (Android only)
• Apple, Inc. (USA) — APNs push notifications (iOS only)
• Functional Software, Inc. (Sentry) (USA) — crash diagnostics (no document content)

Retention

• Active data is retained as long as your account is active.
• Deleted documents are removed from storage within 7 days.
• Deleted accounts are hard-deleted after a 30-day grace period.
• OTP codes are deleted within 5 minutes of issuance.
• Server logs are retained for 30 days for security and debugging purposes.

Contact

Data protection inquiries: privacy@warka.pk.