β—ˆ Legal

Data Processing Agreement – FamRite

Data Processing Agreement for FamRite Enterprise customers processing personal data through the platform.

This Data Processing Agreement (DPA) supplements the FamRite Terms of Service and applies where SUPPATRADE processes personal data on behalf of an Enterprise customer.

1. Roles

The Enterprise customer is the Data Controller. SUPPATRADE is the Data Processor.

2. Processing scope

SUPPATRADE processes personal data solely to provide the FamRite Service as described in the Terms of Service, and only on the documented instructions of the Controller.

3. Security

SUPPATRADE applies the technical and organisational measures described on the Security page: TLS in transit, AES-256 at rest, row-level access control, hosted on Supabase / AWS infrastructure.

4. Sub-processors

SUPPATRADE uses the third-party processors listed in the Privacy Policy: Supabase, Apple App Store, Google Play, Expo / React Native, Anthropic Claude API.

5. Data retention

Personal data is retained while the account is active and deleted within 30 days of account deletion, unless retention is required by law.

6. Contact

DPA enquiries: support@uwj.xtn.mybluehost.me with the subject line “DPA”.