Data Processing Addendum

Roles

For customer analytics data, the customer is generally the controller and Reignat acts as a processor or service provider, processing data according to the customer's instructions and the agreement.

For account, billing, security, and service administration data, Reignat may act as an independent controller where required to operate and protect the service.

Processing instructions

Reignat processes customer data to provide analytics, realtime dashboards, visitor journeys, reports, API access, performance monitoring, support, billing, security, and related platform functionality.

Customer configuration in the dashboard, API usage, installed scripts, and written instructions form the customer's processing instructions.

Categories of data

Processed data may include project domain, paths, referrers, device and browser details, approximate geolocation, timestamps, anonymous visitor and session identifiers, event names, and performance signals.

Customers should not send special category data, highly sensitive data, payment card data, credentials, or direct identifiers unless Reignat has explicitly agreed in writing.

Confidentiality and security

Reignat restricts access to customer data to personnel and subprocessors who need access to provide, maintain, secure, and support the service.

Reignat applies reasonable technical and organizational measures appropriate to the nature of the processing and the risks involved.

Subprocessors

The customer authorizes Reignat to use subprocessors for hosting, storage, database, email, payments, monitoring, and operational services.

Reignat remains responsible for subprocessors' processing of customer data to the extent required by applicable data protection laws.

Assistance and deletion

Reignat will provide reasonable assistance for data subject requests, security obligations, and compliance inquiries where required by law and reasonably possible through the service.

After termination, Reignat will delete or anonymize customer data according to its retention practices, unless retention is required by law, security, dispute resolution, or legitimate business needs.

International transfers

If customer data is transferred internationally, Reignat will rely on appropriate safeguards where required, such as standard contractual clauses or other lawful transfer mechanisms.