Data Processing Addendum

This Data Processing Addendum (“DPA”) supplements the Influki Terms of Service between Influki, Inc. (“Influki”) and the customer (“Controller”).

1. Scope and roles

When Influki processes personal data on behalf of Controller to provide the services, Influki acts as Processor and Controller acts as Controller, as defined by the GDPR.

2. Subject matter and duration

Influki will process personal data only for the duration of the customer's subscription and only as needed to provide the contracted services.

3. Sub-processors

A current list of sub-processors is published at /subprocessors. Influki will notify Controller of changes with reasonable notice.

4. Security measures

Influki maintains technical and organizational measures designed to protect personal data, including encryption in transit and at rest, role-based access controls, and regular reviews.

5. Data subject rights

Influki will provide reasonable assistance to Controller in responding to requests from data subjects regarding access, correction, deletion, or portability.

6. International transfers

Where personal data is transferred outside the EEA or UK, the parties will rely on Standard Contractual Clauses or another lawful transfer mechanism.

Questions? Email privacy@influki.io.