Data Processing Addendum

1. Purpose

This Data Processing Addendum supplements the Privacy Policy and Terms of Service and describes RetentionRail's data processing practices under applicable privacy laws, including GDPR and CCPA where they apply.

2. Nature of Data Processing

RetentionRail processes personal data as both a data controller (for account and usage data) and data processor (for creator platform analytics data processed on your behalf).

As a controller, we determine the purposes and means of processing. As a processor, we process data only on your documented instructions.

3. EEA Privacy Rights

For users in the European Economic Area, we process personal data on the following legal bases: performance of a contract (account management), legitimate interests (service improvement and security), consent (where required), and legal obligation.

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise these rights, contact hello@retentionrail.com.

4. California Privacy Rights

For California residents, RetentionRail does not sell personal information. You have the right to know what personal information we collect, the right to delete personal information, and the right to non-discrimination for exercising your privacy rights.

To submit a CCPA request, contact us at hello@retentionrail.com.

5. Contact Us

For questions about data processing or to exercise your rights, contact our privacy team at hello@retentionrail.com.