DATA PROCESSING ADDENDUM (DPA)

This Data Processing Addendum (“DPA”) forms part of the Terms of Service between Bright Stacker (“Processor”) and the user (“Controller”).

This DPA governs the processing of personal data by Bright Stacker on behalf of the user in connection with RevuSend.

The user is the Data Controller.
Bright Stacker is the Data Processor.

The user determines the purposes and means of processing personal data uploaded to the Software.

Personal data may include:

• Names
• Email addresses
• Phone numbers
• Business names
• Internal contact notes

• Storing contact information
• Sending review request emails
• Managing review link distribution
• Automating communications

• Process personal data only on documented instructions from the user
• Implement reasonable security measures
• Restrict access to authorized personnel
• Not sell or share personal data
• Notify users of known data breaches where legally required

Bright Stacker may use subprocessors including but not limited to:

• Glide
• Make.com
• Zoho Mail
• Hosting providers
• Payment processors

Users acknowledge and agree to the use of these subprocessors.

Data may be processed in the United States. Users consent to international data transfers where applicable.

Upon termination of the account, personal data may be deleted in accordance with the Company’s data retention practices.