Data processing addendum

Roles

You are the controller of the personal data in your records. RebrandLand AI Inc. is the processor and acts only on your documented instructions.

Scope of processing

Subject matter: operation of the Run of Show service. Duration: the term of the subscription plus the retention periods stated in the privacy notice. Categories of data subject: your staff, your clients' staff, and your subcontractors. Categories of data: contact details, engagement records, financial figures and correspondence you enter.

Security measures

Row-level access rules enforced in the database so that one organization cannot read another's records, and a client account cannot read records outside its own client.

Encryption in transit and at rest. Access to production limited to named personnel. An append-only audit trail of record changes.

Subprocessors

We use the subprocessors listed on the subprocessor page and impose equivalent obligations on each. We will give notice before adding one, and you may object.

Incidents

We notify you of a personal data breach affecting your records within seventy-two hours of becoming aware of it, with what we know at the time and what we are doing about it.

Deletion and return

On termination we return or delete personal data on your written instruction, except where retention is required by law.