Data Processing Addendum
Last updated:
On this page
Intended for agency and business customers who need it in writing.
1Roles
For personal data you upload about your customers or contacts (for example, names in a testimonial you supply), you are the Data Fiduciary and Postveo acts as a Data Processor on your instructions. For account and billing data about you, Postveo is the Data Fiduciary — see the Privacy Policy.
2Scope and duration
Processing lasts for as long as your subscription is active, plus the retention periods in the Privacy Policy.
3Subject matter and purpose
Producing, scheduling, publishing and measuring social media content at your instruction.
4Categories of data subjects
Your personnel, and any individuals appearing in content you upload.
5Categories of personal data
Names, contact details, images and any other personal data you choose to include in content.
6Our obligations
We will: process only on your documented instructions; keep the data confidential and limit access to personnel who need it; apply the technical and organisational measures described at postveo.in/security; assist you with data-principal requests and with breach notification; and delete or return the data on termination, subject to legal retention.
7Sub-processors
You authorise the sub-processor categories listed at postveo.in/sub-processors. We will give at least 30 days’ notice before adding a new category, and you may terminate if you reasonably object.
8Breach notification
We will notify you without undue delay after becoming aware of a personal data breach affecting your data, with the information we have at the time.
9Audit
On reasonable written request, not more than once a year, we will provide the information reasonably necessary to demonstrate compliance with this addendum.
10Transfers
As described in the Privacy Policy, section 7.
11Signature
A countersigned copy is available on request from <<SUPPORT_EMAIL>>.