If your business processes personal data through Adsevon — for example, advertising campaign data that includes identifiers — you may need a data processing agreement (DPA) with us. A DPA is a contract addendum that documents how we process data on your behalf: what we do with it, how we protect it, and how we help you meet your own privacy obligations.
Our roles
For the advertising campaign data you upload, you are the data controller and we are your data processor: we process it only on your instructions, to run the analytics and recommendations you request. For your account data (name, email, billing metadata), we are the controller. See our Privacy Policy for the full picture.
What our standard DPA covers
- Processing instructions — we process your campaign data only to provide the service, on your instructions, and as described in our Privacy Policy.
- Security measures — encryption in transit (TLS), bcrypt-hashed passwords, revocable sessions, tenant isolation between workspaces, and audit logging, as described on our security page.
- Subprocessors — the current list is published on our subprocessors page; we update it when our providers change.
- Data subject rights — we provide in-app export and deletion (Settings → Privacy & data) and will assist with rights requests you receive that relate to data we process for you.
- Breach notification — we will notify you without undue delay if we become aware of a personal data breach affecting your data.
- Deletion — at the end of the service, your campaign data is deleted per our retention practices; the append-only security audit trail keeps anonymized entries as described in our Privacy Policy.
How to request one
Email us via the contact page with the subject “DPA request” and include your workspace name and the legal entity name the DPA should cover. We will send you our standard DPA for countersignature.
Important — have your lawyer review it
Our standard DPA is a starting template, not legal advice, and it has not been reviewed by your counsel. Have your lawyer review it before signing to confirm it meets your jurisdiction's requirements. If your procurement process needs changes, tell us what your counsel requires and we will discuss them in good faith.