Data Processing Addendum for the ValidStitch public marketing site. Product-side terms and disclosures should be reviewed before paid uploads launch.
This is a pre-launch draft. Counsel review is pending; the final version will be republished before paid uploads launch. In the meantime, this draft governs use of the marketing site only.
This Data Processing Addendum applies when ValidStitch processes personal data on behalf of a Customer in connection with the ValidStitch service, and is incorporated into the agreement between ValidStitch and that Customer. It supplements, and does not replace, that agreement.
The Customer is the data controller for personal data processed through their use of the service; ValidStitch is the data processor acting on the Customer's documented instructions. Where applicable law uses different terminology, the corresponding roles apply.
ValidStitch will maintain appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Details of those measures are summarized in the Public Security Overview when published and updated from time to time at ValidStitch's reasonable discretion.
ValidStitch may engage subprocessors to provide infrastructure, hosting, email delivery, observability, and similar services. The current list is published on the Subprocessor List page. Notice of new subprocessors will be provided per the subprocessor change notice policy then in effect; objections may be raised in accordance with that policy.
This addendum applies for the duration of the underlying agreement and survives termination as needed to comply with applicable law. Upon termination, ValidStitch will delete or return personal data within a reasonable window, subject to backup retention and legal-hold obligations.