Data Processing Addendum

1. Purpose

This Data Processing Addendum ("DPA") supplements the Terms of Service between Let's Get Viral and Customer. It sets out the obligations of the parties regarding the processing of personal data in connection with the services.

2. Definitions

• "Customer Data" means any personal data uploaded to the services by Customer or on Customer’s behalf.
• "Applicable Data Protection Law" means all privacy regulations relevant to the processing performed under the Terms.
• "Sub-processor" means any third party engaged by Let's Get Viral to process Customer Data.

3. Roles and Responsibilities

Let's Get Viral acts as Processor and Customer acts as Controller with respect to Customer Data. Let's Get Viral will process Customer Data only on documented instructions from Customer.

4. Security Measures

Let's Get Viral maintains administrative, technical, and physical safeguards designed to protect Customer Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Security controls include encrypted transport, role-based access, and monitoring of data access within our infrastructure.

5. Sub-processors

Let's Get Viral may engage Sub-processors to deliver the services. A current list of Sub-processors is available upon request. Let's Get Viral will ensure Sub-processors are bound by data protection obligations equivalent to this DPA.

6. Data Subject Requests

To the extent legally permitted, Let's Get Viral will assist Customer in responding to requests from data subjects exercising rights under Applicable Data Protection Law.

7. International Transfers

If Customer Data is transferred outside the region where it originated, Let's Get Viral will ensure appropriate transfer mechanisms are in place, such as Standard Contractual Clauses or equivalent safeguards.

8. Termination

Upon termination of the services, Let's Get Viral will delete or return Customer Data in accordance with the Terms, except where retention is required by law.

9. Contact

Questions regarding this DPA can be directed to privacy@letsgetviral.app.