Overview
SnowSEO is operated by Kapybara LLC. When you use SnowSEO to process personal data - for example the content you create, your account details, or data from services you connect - SnowSEO acts as a processor on your behalf and you act as the controller.
This page summarises the terms on which we process personal data. A countersigned Data Processing Agreement is available on request and, once executed, governs that processing.
Roles of the Parties
For personal data processed through the service on your behalf, you are the controller and SnowSEO (Kapybara LLC) is the processor. We process that data only on your documented instructions, including the instructions given through the product and your account settings.
What We Process
The subject matter is the provision of the SnowSEO service. The nature and purpose of the processing, the types of personal data, and the categories of data subjects are described in our Privacy Policy.
Confidentiality & Security
We require personnel authorised to process personal data to keep it confidential, and we maintain technical and organisational measures appropriate to the risk - including encryption in transit, access controls, and logging. Our security practices are summarised in our Privacy Policy.
Sub-processors
You authorise SnowSEO to engage the sub-processors listed on our Sub-processors page to help provide the service. We remain responsible for their performance, enter into data processing terms with them, and reflect material changes to that list.
Assisting You with Data Subject Requests
Taking into account the nature of the processing, we assist you in responding to data subject requests - access, rectification, erasure, restriction, portability, and objection. SnowSEO also provides self-service data export and account deletion directly in the dashboard.
Personal Data Breaches
We will notify you without undue delay after becoming aware of a personal data breach affecting your personal data, and provide information reasonably needed for you to meet your own notification obligations.
International Data Transfers
Some of our sub-processors are located outside the EEA, UK, or Switzerland. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.
Retention, Return & Deletion
We retain personal data in line with the retention periods set out in our Privacy Policy. On termination of the service, we delete or return personal data, except where retention is required by law.
Requesting a Signed DPA
If you require a countersigned Data Processing Agreement - for example for your own compliance or procurement - email [email protected] and we will provide one. The signed agreement governs the binding terms of the processing.
Kapybara LLC, 1309 Coffeen Avenue Ste 1200, Sheridan, WY 82801, United States.
