Data Processing Addendum

1. Purpose

This Data Processing Addendum supplements the Privacy Policy and Terms of Service and describes how RetentionRail processes personal data in compliance with applicable data protection regulations including GDPR and CCPA.

2. Nature of Data Processing

RetentionRail processes personal data as both a data controller (for account and usage data) and data processor (for creator platform analytics data processed on your behalf).

As a controller, we determine the purposes and means of processing. As a processor, we process data only on your documented instructions.

3. GDPR Compliance

For users in the European Economic Area, we process personal data on the following legal bases: performance of a contract (account management), legitimate interests (service improvement and security), consent (where required), and legal obligation.

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise these rights, contact hello@retentionrail.com.

4. CCPA Compliance

For California residents, RetentionRail does not sell personal information. You have the right to know what personal information we collect, the right to delete personal information, and the right to non-discrimination for exercising your privacy rights.

To submit a CCPA request, contact us at hello@retentionrail.com.

5. Contact Us

For questions about data processing or to exercise your rights, contact our privacy team at hello@retentionrail.com.