AppoByte's Data Processing Addendum ("DPA") defines how personal data is processed when customers use AppoByte services. The DPA forms part of the agreement between AppoByte and its customers and applies whenever AppoByte processes Personal Data on behalf of a customer.
The DPA is incorporated by reference into the AppoByte Terms of Service or applicable customer agreement.
Roles of the Parties
When customers use AppoByte services:
- Customers act as the Data Controller with respect to personal data they submit to the platform.
- AppoByte acts as the Data Processor and processes personal data solely on behalf of the customer.
- AppoByte may act as a Data Controller for limited operational data, such as account administration and service usage data, as described in the AppoByte Privacy Policy.
Scope of Processing
AppoByte processes personal data only for the purpose of delivering and supporting the services provided to customers. Processing activities may include:
- Operating and maintaining the platform
- Providing product functionality requested by the customer
- Supporting service performance and security monitoring
- Preventing abuse, fraud, or unauthorized access
- Complying with legal obligations
AppoByte processes personal data only in accordance with customer instructions provided through the use of the services.
Security Measures
AppoByte maintains administrative, technical, and organizational safeguards designed to protect personal data from unauthorized access, loss, or disclosure.
Security practices include:
- Encryption of data in transit using TLS 1.2 or higher
- Encryption of data at rest where supported by infrastructure providers
- Role-based access controls and least-privilege access management
- Multi-factor authentication for privileged access
- Security monitoring, logging, and incident response procedures
- Regular security reviews and vulnerability management
Additional details regarding AppoByte's security practices are available in the AppoByte Trust Center.
Subprocessors
AppoByte may engage trusted subprocessors to support delivery of its services. These subprocessors are required to maintain appropriate security safeguards and contractual data protection obligations.
A current list of subprocessors is available in the Subprocessors section of the AppoByte Trust Center.
Data Subject Rights & Incident Response
AppoByte provides reasonable assistance to customers in responding to requests from individuals exercising their data protection rights under applicable laws.
If AppoByte becomes aware of a confirmed security incident affecting personal data processed on behalf of a customer, AppoByte will notify the customer without undue delay and provide relevant information necessary to support appropriate response actions.
Full Data Processing Addendum
The complete Data Processing Addendum, including detailed provisions and processing annexes, is available below.
Download the Full DPAContact
For questions regarding AppoByte's data protection practices or Data Processing Addendum:
Privacy Team
privacy@appobyte.com