Data Processing Addendum

This Data Processing Addendum ("DPA") supplements the SocialMynt Terms of Service between SocialMynt Technologies Inc. ("Processor") and the customer ("Controller") when Controller's use of the Service involves the processing of personal data subject to GDPR, UK GDPR, the Swiss FADP, or comparable laws.

1. Subject matter & duration

The subject matter is the provision of the SocialMynt Service. The duration matches the term of the underlying agreement plus any post-termination period during which SocialMynt is legally required to retain data.

2. Nature & purpose of processing

SocialMynt processes personal data to operate the marketplace, route applications, attribute campaign performance, calculate payouts, prevent fraud, and provide support.

3. Categories of data & data subjects

• Data subjects: Controller's authorized users (creators, brand-side operators), and end audiences to the extent identifiers appear in attribution telemetry.
• Personal data: identifiers (name, email, handle), professional data (channel, audience metrics), transactional data, and technical / attribution data.

4. Processor obligations

• Process personal data only on Controller's documented instructions.
• Ensure personnel authorized to process data are bound by confidentiality.
• Implement appropriate technical and organizational measures (see /security).
• Assist Controller with data-subject requests and impact assessments.
• Notify Controller without undue delay of a confirmed personal-data breach.

5. Sub-processors

Controller authorizes SocialMynt to engage sub-processors to provide the Service (for example, cloud hosting, payment processing, email delivery, and analytics). A current list is available on request from privacy@socialmynt.com. SocialMynt will provide notice of changes and give Controller an opportunity to object on reasonable grounds.

6. International transfers

Where personal data is transferred outside the EEA, UK, or Switzerland to a country that does not benefit from an adequacy decision, the parties rely on the applicable EU Standard Contractual Clauses and UK Addendum, which are incorporated by reference.

7. Return or deletion

Upon termination, SocialMynt will delete or return personal data processed on Controller's behalf, subject to legal retention obligations.

8. Signing

To sign a countersigned copy of this DPA, email legal@socialmynt.com with your entity name, address, and DPA contact.