Data Processing Agreement

SnowSEO is operated by Kapybara LLC. When you use SnowSEO to process personal data — for example the content you create, your account details, or data from services you connect — SnowSEO acts as a processor on your behalf and you act as the controller.

This page summarises the terms on which we process personal data. A countersigned Data Processing Agreement is available on request and, once executed, governs that processing.

For personal data processed through the service on your behalf, you are the controller and SnowSEO (Kapybara LLC) is the processor. We process that data only on your documented instructions, including the instructions given through the product and your account settings.

The subject matter is the provision of the SnowSEO service. The nature and purpose of the processing, the types of personal data, and the categories of data subjects are described in our Privacy Policy.

We require personnel authorised to process personal data to keep it confidential, and we maintain technical and organisational measures appropriate to the risk — including encryption in transit, access controls, and logging. Our security practices are summarised in our Privacy Policy.

You authorise SnowSEO to engage the sub-processors listed on our Sub-processors page to help provide the service. We remain responsible for their performance, enter into data processing terms with them, and reflect material changes to that list.

Taking into account the nature of the processing, we assist you in responding to data subject requests — access, rectification, erasure, restriction, portability, and objection. SnowSEO also provides self-service data export and account deletion directly in the dashboard.

We will notify you without undue delay after becoming aware of a personal data breach affecting your personal data, and provide information reasonably needed for you to meet your own notification obligations.

Some of our sub-processors are located outside the EEA, UK, or Switzerland. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.

We retain personal data in line with the retention periods set out in our Privacy Policy. On termination of the service, we delete or return personal data, except where retention is required by law.

If you require a countersigned Data Processing Agreement — for example for your own compliance or procurement — email [email protected] and we will provide one. The signed agreement governs the binding terms of the processing.

Kapybara LLC, 1309 Coffeen Avenue Ste 1200, Sheridan, WY 82801, United States.