This Data Processing Addendum applies when Powerloop Solutions processes personal data in customer-uploaded workflow files on behalf of a business customer. It supplements the Terms of Service and any applicable order form.
Roles
The customer is the controller, business, or equivalent decision-maker for uploaded files. Powerloop Solutions acts as processor, service provider, or equivalent recipient and processes customer personal data only on documented customer instructions.
Processing Details
The processing purpose is to provide workflow XML upload, storage, comparison, duplicate analysis, task analysis, consolidation, support, security, billing, and service administration. Categories of data may include names, email addresses, shipment references, office information, internal workflow logic, and other information included by the customer in workflow files.
Customer Instructions
Customer instructs Powerloop Solutions to process uploaded files as needed to provide the service, comply with law, maintain security, use disclosed subprocessors, and follow deletion or return instructions. Customer is responsible for upload authorization, notice, consent, and responding to end-user or client obligations that apply to the data.
Security Measures
Powerloop Solutions will maintain technical and organizational measures designed to protect uploaded files, including HTTPS, authenticated access, private storage, tenant or user-scoped storage paths, infrastructure encryption at rest, restricted secrets, deletion workflows, and incident-response procedures appropriate to the service.
Subprocessors
Customer authorizes Powerloop Solutions to use subprocessors for hosting, storage, authentication, logging, email, analytics, payment processing, and support. Powerloop Solutions remains responsible for subprocessor performance as required by applicable law and will make current subprocessor information available upon request.
Security Incidents
Powerloop Solutions will notify customer without undue delay after determining that a security incident affecting customer personal data requires notice. Notice will include information reasonably available about the nature of the incident, affected data, mitigation steps, and recommended customer actions.
Deletion and Return
Upon customer request or account termination, Powerloop Solutions will delete or return customer personal data in accordance with the service functionality, order form, or written instructions, unless retention is required by law or needed for legitimate security, backup, accounting, or dispute-resolution purposes.
Assistance
Taking into account the nature of the processing, Powerloop Solutions will provide reasonable assistance with privacy requests, security information, breach notifications, and data protection impact assessments where required by applicable law and where the customer cannot reasonably address the matter without assistance.
International Transfers
If customer personal data is transferred outside the jurisdiction where it was collected, Powerloop Solutions will use an appropriate transfer mechanism where required, such as standard contractual clauses or another lawful transfer basis.
Audit and Compliance Information
Powerloop Solutions will make reasonable security and compliance information available to business customers upon request. Any audit must be scoped, scheduled, confidentiality protected, and conducted in a way that does not compromise the security or confidentiality of other customers.