> ## Documentation Index
> Fetch the complete documentation index at: https://docs.backupmaster.io/llms.txt
> Use this file to discover all available pages before exploring further.

# GDPR and data privacy for BigCommerce

> Understand how BackupMaster handles personal data, data controller and processor roles, and GDPR compliance for your BigCommerce store backups.

If you operate in the EU or handle data from EU residents, the following describes how BackupMaster processes personal data.

## Data controller and processor roles

You remain the data controller for your customers' personal data. BackupMaster acts as a data processor and processes data only as needed to deliver the backup service.

## Data Processing Agreement (DPA)

The [Data Processing Addendum](https://www.backupmaster.io/gdpr-data-processing-addendum) covers how BackupMaster processes personal data on your behalf.

## Personal data in backups

Backups may contain personal data such as customer names, emails, and order details. This data is encrypted at rest with AES-256 and in transit with TLS. For details on how BackupMaster secures your data, see [Security overview](/bigcommerce/security-and-compliance/security-overview).

## Data deletion on uninstall

When you uninstall BackupMaster, your backup data is permanently deleted after a retention period. See [Data retention](/bigcommerce/backups/how-backups-work#data-retention) for details.

## Right to erasure

For data deletion requests related to the GDPR right to erasure, contact support at [support@backupmaster.io](mailto:support@backupmaster.io). The team can help you address specific deletion requests within your backup storage.

## Related

* [Security overview](/bigcommerce/security-and-compliance/security-overview)
* [SOC 2 certification](/bigcommerce/security-and-compliance/soc-2-certification)
* [Data retention](/bigcommerce/backups/how-backups-work#data-retention)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.