Data Processing Addendum v1

# Data Processing Addendum This Data Processing Addendum applies where we process personal data on your behalf (e.g. agency client workspaces, audience comments). ROLES. You are the controller; we are the processor. SUBJECT MATTER: operation of the Service. DURATION: your subscription term. NATURE/PURPOSE: hosting, AI processing, scheduling, publishing, analytics. OUR OBLIGATIONS: process only on your documented instructions; ensure personnel confidentiality; implement appropriate technical and organisational measures (encryption of secrets at rest, TLS, access controls, audit logs); engage sub-processors (AI providers, Stripe, cloud hosting/storage, email) under equivalent terms — current list available on request; assist with data-subject requests and breach notifications without undue delay; delete or return personal data at termination on request. INTERNATIONAL TRANSFERS rely on appropriate safeguards (e.g. SCCs) where applicable.